f16a87e183bfe34afc75098a027d9397bf97a8fd2d289abe723d628072602b3c

Analysis

max time kernel
30s
max time network
33s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2023, 23:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Discord_Nitro_Generator.exe
Size

10.3MB
MD5

deb8e6b240f3fe4f14717f270bc7d72b
SHA1

454d0cc939a7c45fcd38f2a10a6fe025d8c2a1ba
SHA256

f16a87e183bfe34afc75098a027d9397bf97a8fd2d289abe723d628072602b3c
SHA512

cd3da01d3305e722cec703e4e7a5581ca1e73a6f8a6133ed0fb8e4a2a8c619dd719ce390f8fce142b1a06171f9576d679c80b19b099e306d2ea2a69a9aee6b83
SSDEEP

196608:SDf+GIzme9onJ5hrZERlyiU8AdZYJERS48RmU/3ZlsPvarTsZg8CNhHSzCqblZou:JPzJ9c5hlERJAdZYygtN3ZWarQcHSl6

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 10 IoCs

pid	Process
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe
780	Discord_Nitro_Generator.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
780	Discord_Nitro_Generator.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3668 wrote to memory of 780	3668	Discord_Nitro_Generator.exe	86
PID 3668 wrote to memory of 780	3668	Discord_Nitro_Generator.exe	86

C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe
"C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3668
- C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe
  "C:\Users\Admin\AppData\Local\Temp\Discord_Nitro_Generator.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  PID:780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI36682\VCRUNTIME140.dll

Filesize
99KB

MD5
8697c106593e93c11adc34faa483c4a0

SHA1
cd080c51a97aa288ce6394d6c029c06ccb783790

SHA256
ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833

SHA512
724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\VCRUNTIME140.dll

Filesize
99KB

MD5
8697c106593e93c11adc34faa483c4a0

SHA1
cd080c51a97aa288ce6394d6c029c06ccb783790

SHA256
ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833

SHA512
724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_ctypes.pyd

Filesize
122KB

MD5
29da9b022c16da461392795951ce32d9

SHA1
0e514a8f88395b50e797d481cbbed2b4ae490c19

SHA256
3b4012343ef7a266db0b077bbb239833779192840d1e2c43dfcbc48ffd4c5372

SHA512
5c7d83823f1922734625cf69a481928a5c47b6a3bceb7f24c9197175665b2e06bd1cfd745c55d1c5fe1572f2d8da2a1dcc1c1f5de0903477bb927aca22ecb26a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_ctypes.pyd

Filesize
122KB

MD5
29da9b022c16da461392795951ce32d9

SHA1
0e514a8f88395b50e797d481cbbed2b4ae490c19

SHA256
3b4012343ef7a266db0b077bbb239833779192840d1e2c43dfcbc48ffd4c5372

SHA512
5c7d83823f1922734625cf69a481928a5c47b6a3bceb7f24c9197175665b2e06bd1cfd745c55d1c5fe1572f2d8da2a1dcc1c1f5de0903477bb927aca22ecb26a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_pytransform.dll

Filesize
1.1MB

MD5
4efa0c322322df15b64d62cc09871604

SHA1
85e15d3b2f10261ae62a5843d8cae2fbc35dc2a4

SHA256
ea37ae4bc39476539a3e9a2ed32a453616911628f745b1fb5012d74fff0759a3

SHA512
d3f616255ef9e4175196f83b7582d22dad7ae602b6da1a4b5db9b5eb7aaff0e8e859b4189f7a0d742d7208b080a565ca0022c1d6c6b9b523fffe134c032025c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_pytransform.dll

Filesize
1.1MB

MD5
4efa0c322322df15b64d62cc09871604

SHA1
85e15d3b2f10261ae62a5843d8cae2fbc35dc2a4

SHA256
ea37ae4bc39476539a3e9a2ed32a453616911628f745b1fb5012d74fff0759a3

SHA512
d3f616255ef9e4175196f83b7582d22dad7ae602b6da1a4b5db9b5eb7aaff0e8e859b4189f7a0d742d7208b080a565ca0022c1d6c6b9b523fffe134c032025c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_socket.pyd

Filesize
77KB

MD5
f5dd9c5922a362321978c197d3713046

SHA1
4fbc2d3e15f8bb21ecc1bf492f451475204426cd

SHA256
4494992665305fc9401ed327398ee40064fe26342fe44df11d89d2ac1cc6f626

SHA512
ce818113bb87c6e38fa85156548c6f207aaab01db311a6d8c63c6d900d607d7beff73e64d717f08388ece4b88bf8b95b71911109082cf4b0c0a9b0663b9a8e99

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_socket.pyd

Filesize
77KB

MD5
f5dd9c5922a362321978c197d3713046

SHA1
4fbc2d3e15f8bb21ecc1bf492f451475204426cd

SHA256
4494992665305fc9401ed327398ee40064fe26342fe44df11d89d2ac1cc6f626

SHA512
ce818113bb87c6e38fa85156548c6f207aaab01db311a6d8c63c6d900d607d7beff73e64d717f08388ece4b88bf8b95b71911109082cf4b0c0a9b0663b9a8e99

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_ssl.pyd

Filesize
149KB

MD5
ef4755195cc9b2ff134ea61acde20637

SHA1
d5ba42c97488da1910cf3f83a52f7971385642c2

SHA256
8a86957b3496c8b679fcf22c287006108bfe0bb0aaffea17121c761a0744b470

SHA512
63ad2601fb629e74cf60d980cec292b6e8349615996651b7c7f68991cdae5f89b28c11adb77720d7dbbd7700e55fdd5330a84b4a146386cf0c0418a8d61a8a71

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\_ssl.pyd

Filesize
149KB

MD5
ef4755195cc9b2ff134ea61acde20637

SHA1
d5ba42c97488da1910cf3f83a52f7971385642c2

SHA256
8a86957b3496c8b679fcf22c287006108bfe0bb0aaffea17121c761a0744b470

SHA512
63ad2601fb629e74cf60d980cec292b6e8349615996651b7c7f68991cdae5f89b28c11adb77720d7dbbd7700e55fdd5330a84b4a146386cf0c0418a8d61a8a71

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\base_library.zip

Filesize
767KB

MD5
566017486a592241edeba9983f84ff82

SHA1
fb8008d48d6be46272f11488a0282a861d55a834

SHA256
8df089ca192809420b2425e27dabb50a5d7789ac4a7d62469715004fa692ed0a

SHA512
1358a59c714aa242be66eec7fa03ee55e36b1631f6abd2060424e2e5333b4db4d208a25413bad0210b5ffa88c3e01cbc6d3f99642bcd7fc2aa36e600986104fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\file.exe.manifest

Filesize
1KB

MD5
9d75af9a23adce751bb9a632ef96850f

SHA1
e3b6b477616d122909e2f82c123be099d48a20ed

SHA256
ba5c9a4c0311f9768153150df44fcbda10f13b0706e018840b104f305625f06c

SHA512
b99122b01dc144ddb0deb2cfe356be58f95cf2d6edd45e3b80fd54bccd922aa72303717517bde6e948bee4178ab34bcb8f0f612ba88812b0fda531f91a8ae64c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libcrypto-1_1.dll

Filesize
3.2MB

MD5
cc4cbf715966cdcad95a1e6c95592b3d

SHA1
d5873fea9c084bcc753d1c93b2d0716257bea7c3

SHA256
594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1

SHA512
3b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libcrypto-1_1.dll

Filesize
3.2MB

MD5
cc4cbf715966cdcad95a1e6c95592b3d

SHA1
d5873fea9c084bcc753d1c93b2d0716257bea7c3

SHA256
594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1

SHA512
3b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libffi-7.dll

Filesize
32KB

MD5
eef7981412be8ea459064d3090f4b3aa

SHA1
c60da4830ce27afc234b3c3014c583f7f0a5a925

SHA256
f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

SHA512
dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libffi-7.dll

Filesize
32KB

MD5
eef7981412be8ea459064d3090f4b3aa

SHA1
c60da4830ce27afc234b3c3014c583f7f0a5a925

SHA256
f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

SHA512
dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libssl-1_1.dll

Filesize
673KB

MD5
bc778f33480148efa5d62b2ec85aaa7d

SHA1
b1ec87cbd8bc4398c6ebb26549961c8aab53d855

SHA256
9d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843

SHA512
80c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\libssl-1_1.dll

Filesize
673KB

MD5
bc778f33480148efa5d62b2ec85aaa7d

SHA1
b1ec87cbd8bc4398c6ebb26549961c8aab53d855

SHA256
9d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843

SHA512
80c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\python39.dll

Filesize
4.3MB

MD5
11c051f93c922d6b6b4829772f27a5be

SHA1
42fbdf3403a4bc3d46d348ca37a9f835e073d440

SHA256
0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

SHA512
1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\python39.dll

Filesize
4.3MB

MD5
11c051f93c922d6b6b4829772f27a5be

SHA1
42fbdf3403a4bc3d46d348ca37a9f835e073d440

SHA256
0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

SHA512
1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\select.pyd

Filesize
26KB

MD5
7a442bbcc4b7aa02c762321f39487ba9

SHA1
0fcb5bbdd0c3d3c5943e557cc2a5b43e20655b83

SHA256
1dd7bba480e65802657c31e6d20b1346d11bca2192575b45eb9760a4feb468ad

SHA512
3433c46c7603ae0a73aa9a863b2aecd810f8c0cc6c2cd96c71ef6bde64c275e0fceb4ea138e46a5c9bf72f66dcdea3e9551cf2103188a1e98a92d8140879b34c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI36682\select.pyd

Filesize
26KB

MD5
7a442bbcc4b7aa02c762321f39487ba9

SHA1
0fcb5bbdd0c3d3c5943e557cc2a5b43e20655b83

SHA256
1dd7bba480e65802657c31e6d20b1346d11bca2192575b45eb9760a4feb468ad

SHA512
3433c46c7603ae0a73aa9a863b2aecd810f8c0cc6c2cd96c71ef6bde64c275e0fceb4ea138e46a5c9bf72f66dcdea3e9551cf2103188a1e98a92d8140879b34c

Download Submit
memory/780-1112-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1134-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1104-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1110-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1102-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1114-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1116-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1118-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1120-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1122-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1124-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1126-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1128-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1130-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1132-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1101-0x000001D5AE650000-0x000001D5AE651000-memory.dmp

Filesize
4KB

Download
memory/780-1136-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1138-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1140-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1142-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1144-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1146-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1148-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1150-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1152-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1154-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1156-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1158-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1160-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1162-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download
memory/780-1164-0x000001D5AE660000-0x000001D5AE661000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads