General

  • Target

    https://github.com/Banana135/Discord-Token-Generator/blob/a78bbe7e91989224677cabf0fe978662c3f85a08/DiscordTokenGen.EXE

  • Sample

    221125-pcz12sff82

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/Banana135/Discord-Token-Generator/blob/a78bbe7e91989224677cabf0fe978662c3f85a08/DiscordTokenGen.EXE

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

3
T1112

Command and Control

Web Service

1
T1102

Tasks