Overview

overview

7

Static

static

3

Discord-We...er.exe

windows10-1703-x64

7

Analysis

  • max time kernel
    36s
  • max time network
    17s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    06/06/2023, 18:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Discord-Webhook-Spammer.exe

  • Size

    7.3MB

  • MD5

    626c1035572520b7333f31caad9f6b35

  • SHA1

    754e8bc92cee1402098d72f451e28b1e683404cb

  • SHA256

    6a5ec9f3e42f9ab0056a175d931fee98d392df6bb2a110df89aeb5576bfa1a54

  • SHA512

    ecfe7b5116f7a6a74eaf4851b61391fe6972c306fbe50acb36ca6981633cea57a940fb6b6e9247d811e541fa4addc0a981b3ebda3a43920d0df0c84c15473d47

  • SSDEEP

    196608:UtIY3avuuDfyGZ21X5Sp6GemDMPwuWG28YPGHh8G:BY3aJDfD0pfaMPb6

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 15 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Discord-Webhook-Spammer.exe
    "C:\Users\Admin\AppData\Local\Temp\Discord-Webhook-Spammer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Users\Admin\AppData\Local\Temp\Discord-Webhook-Spammer.exe
      "C:\Users\Admin\AppData\Local\Temp\Discord-Webhook-Spammer.exe"
      2⤵
      • Loads dropped DLL
      PID:4416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\VCRUNTIME140.dll
          Filesize

          106KB

          MD5

          4585a96cc4eef6aafd5e27ea09147dc6

          SHA1

          489cfff1b19abbec98fda26ac8958005e88dd0cb

          SHA256

          a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

          SHA512

          d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_bz2.pyd
          Filesize

          82KB

          MD5

          a62207fc33140de460444e191ae19b74

          SHA1

          9327d3d4f9d56f1846781bcb0a05719dea462d74

          SHA256

          ebcac51449f323ae3ae961a33843029c34b6a82138ccd9214cf99f98dd2148c2

          SHA512

          90f9db9ee225958cb3e872b79f2c70cb1fd2248ebaa8f3282afff9250285852156bf668f5cfec49a4591b416ce7ebaaac62d2d887152f5356512f2347e3762b7

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_hashlib.pyd
          Filesize

          63KB

          MD5

          787b82d4466f393366657b8f1bc5f1a9

          SHA1

          658639cddda55ac3bfc452db4ec9cf88851e606b

          SHA256

          241322647ba9f94bdc3ae387413ffb57ae14c8cf88bd564a31fe193c6ca43e37

          SHA512

          afcf66962958f38eec8b591aa30d380eb0e1b41028836058ff91b4d1472658de9fba3262f5c27ba688bd73da018e938f398e45911cd37584f623073067f575b6

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_lzma.pyd
          Filesize

          155KB

          MD5

          0c7ea68ca88c07ae6b0a725497067891

          SHA1

          c2b61a3e230b30416bc283d1f3ea25678670eb74

          SHA256

          f74aaf0aa08cf90eb1eb23a474ccb7cb706b1ede7f911daf7ae68480765bdf11

          SHA512

          fd52f20496a12e6b20279646663d880b1354cffea10793506fe4560ed7da53e4efba900ae65c9996fbb3179c83844a9674051385e6e3c26fb2622917351846b9

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_queue.pyd
          Filesize

          31KB

          MD5

          06248702a6cd9d2dd20c0b1c6b02174d

          SHA1

          3f14d8af944fe0d35d17701033ff1501049e856f

          SHA256

          ac177cd84c12e03e3a68bca30290bc0b8f173eee518ef1fa6a9dce3a3e755a93

          SHA512

          5b22bbff56a8b48655332ebd77387d307f5c0a526626f3654267a34bc4863d8afaf08ff3946606f3cf00b660530389c37bdfac91843808dbebc7373040fec4c1

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_socket.pyd
          Filesize

          77KB

          MD5

          26dd19a1f5285712068b9e41808e8fa0

          SHA1

          90c9a112dd34d45256b4f2ed38c1cbbc9f24dba5

          SHA256

          eaabf6b78840daeaf96b5bdbf06adf0e4e2994dfeee5c5e27fefd824dbda5220

          SHA512

          173e1eda05d297d7da2193e8566201f05428437adcac80aecefe80f82d46295b15ce10990b5c080325dc59a432a587eef84a15ec688a62b82493ad501a1e4520

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\_ssl.pyd
          Filesize

          157KB

          MD5

          ab0e4fbffb6977d0196c7d50bc76cf2d

          SHA1

          680e581c27d67cd1545c810dbb175c2a2a4ef714

          SHA256

          680ad2de8a6cff927822c1d7dd22112a3e8a824e82a7958ee409a7b9ce45ec70

          SHA512

          2bff84a8ec7a26dde8d1bb09792ead8636009c8ef3fa68300a75420197cd7b6c8eaaf8db6a5f97442723e5228afa62961f002948e0eeee8c957c6517547dffba

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\base_library.zip
          Filesize

          1.7MB

          MD5

          62bfde0a20e940e52cd87ef5fe63a07c

          SHA1

          c5e1592e31c45a40da0beda9526ac205bf8cdb6f

          SHA256

          7dec46341a8671ac0ad90a3693b8a8ac88495a6a636641e0ec3721e58dd1bd89

          SHA512

          698594301d358a200052ce6520b15dd680ca949503444a6383ca63dbd8ef175459d69e56697a300b0758d4473ceab8f659bca0f3b4e11aae44525ba23bbe0feb

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\charset_normalizer\md.cp311-win_amd64.pyd
          Filesize

          10KB

          MD5

          fa50d9f8bce6bd13652f5090e7b82c4d

          SHA1

          ee137da302a43c2f46d4323e98ffd46d92cf4bef

          SHA256

          fff69928dea1432e0c7cb1225ab96f94fd38d5d852de9a6bb8bf30b7d2bedceb

          SHA512

          341cec015e74348eab30d86ebb35c028519703006814a2ecd19b9fe5e6fcb05eda6dde0aaf4fe624d254b0d0180ec32adf3b93ee96295f8f0f4c9d4ed27a7c0c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
          Filesize

          113KB

          MD5

          2d1f2ffd0fecf96a053043daad99a5df

          SHA1

          b03d5f889e55e802d3802d0f0caa4d29c538406b

          SHA256

          207bbae9ddf8bdd64e65a8d600fe1dd0465f2afcd6dc6e28d4d55887cd6cbd13

          SHA512

          4f7d68f241a7f581e143a010c78113154072c63adff5f200ef67eb34d766d14ce872d53183eb2b96b1895aa9c8d4ca82ee5e61e1c5e655ff5be56970be9ebe3e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\libcrypto-1_1.dll
          Filesize

          3.3MB

          MD5

          9d7a0c99256c50afd5b0560ba2548930

          SHA1

          76bd9f13597a46f5283aa35c30b53c21976d0824

          SHA256

          9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

          SHA512

          cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\libssl-1_1.dll
          Filesize

          688KB

          MD5

          bec0f86f9da765e2a02c9237259a7898

          SHA1

          3caa604c3fff88e71f489977e4293a488fb5671c

          SHA256

          d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd

          SHA512

          ffbc4e5ffdb49704e7aa6d74533e5af76bbe5db297713d8e59bd296143fe5f145fbb616b343eed3c48eceaccccc2431630470d8975a4a17c37eafcc12edd19f4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\python311.dll
          Filesize

          5.5MB

          MD5

          e2bd5ae53427f193b42d64b8e9bf1943

          SHA1

          7c317aad8e2b24c08d3b8b3fba16dd537411727f

          SHA256

          c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

          SHA512

          ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\select.pyd
          Filesize

          29KB

          MD5

          756c95d4d9b7820b00a3099faf3f4f51

          SHA1

          893954a45c75fb45fe8048a804990ca33f7c072d

          SHA256

          13e4d9a734a453a3613e11b6a518430099ad7e3d874ea407d1f9625b7f60268a

          SHA512

          0f54f0262cf8d71f00bf5666eb15541c6ecc5246cd298efd3b7dd39cdd29553a8242d204c42cfb28c537c3d61580153200373c34a94769f102b3baa288f6c398

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI26242\unicodedata.pyd
          Filesize

          1.1MB

          MD5

          58f7988b50cba7b793884f580c7083e1

          SHA1

          d52c06b19861f074e41d8b521938dee8b56c1f2e

          SHA256

          e36d14cf49ca2af44fae8f278e883341167bc380099dac803276a11e57c9cfa1

          SHA512

          397fa46b90582f8a8cd7df23b722204c38544717bf546837c45e138b39112f33a1850be790e248fca5b5ecd9ed7c91cd1af1864f72717d9805c486db0505fb9c

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\VCRUNTIME140.dll
          Filesize

          106KB

          MD5

          4585a96cc4eef6aafd5e27ea09147dc6

          SHA1

          489cfff1b19abbec98fda26ac8958005e88dd0cb

          SHA256

          a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

          SHA512

          d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_bz2.pyd
          Filesize

          82KB

          MD5

          a62207fc33140de460444e191ae19b74

          SHA1

          9327d3d4f9d56f1846781bcb0a05719dea462d74

          SHA256

          ebcac51449f323ae3ae961a33843029c34b6a82138ccd9214cf99f98dd2148c2

          SHA512

          90f9db9ee225958cb3e872b79f2c70cb1fd2248ebaa8f3282afff9250285852156bf668f5cfec49a4591b416ce7ebaaac62d2d887152f5356512f2347e3762b7

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_hashlib.pyd
          Filesize

          63KB

          MD5

          787b82d4466f393366657b8f1bc5f1a9

          SHA1

          658639cddda55ac3bfc452db4ec9cf88851e606b

          SHA256

          241322647ba9f94bdc3ae387413ffb57ae14c8cf88bd564a31fe193c6ca43e37

          SHA512

          afcf66962958f38eec8b591aa30d380eb0e1b41028836058ff91b4d1472658de9fba3262f5c27ba688bd73da018e938f398e45911cd37584f623073067f575b6

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_lzma.pyd
          Filesize

          155KB

          MD5

          0c7ea68ca88c07ae6b0a725497067891

          SHA1

          c2b61a3e230b30416bc283d1f3ea25678670eb74

          SHA256

          f74aaf0aa08cf90eb1eb23a474ccb7cb706b1ede7f911daf7ae68480765bdf11

          SHA512

          fd52f20496a12e6b20279646663d880b1354cffea10793506fe4560ed7da53e4efba900ae65c9996fbb3179c83844a9674051385e6e3c26fb2622917351846b9

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_queue.pyd
          Filesize

          31KB

          MD5

          06248702a6cd9d2dd20c0b1c6b02174d

          SHA1

          3f14d8af944fe0d35d17701033ff1501049e856f

          SHA256

          ac177cd84c12e03e3a68bca30290bc0b8f173eee518ef1fa6a9dce3a3e755a93

          SHA512

          5b22bbff56a8b48655332ebd77387d307f5c0a526626f3654267a34bc4863d8afaf08ff3946606f3cf00b660530389c37bdfac91843808dbebc7373040fec4c1

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_socket.pyd
          Filesize

          77KB

          MD5

          26dd19a1f5285712068b9e41808e8fa0

          SHA1

          90c9a112dd34d45256b4f2ed38c1cbbc9f24dba5

          SHA256

          eaabf6b78840daeaf96b5bdbf06adf0e4e2994dfeee5c5e27fefd824dbda5220

          SHA512

          173e1eda05d297d7da2193e8566201f05428437adcac80aecefe80f82d46295b15ce10990b5c080325dc59a432a587eef84a15ec688a62b82493ad501a1e4520

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\_ssl.pyd
          Filesize

          157KB

          MD5

          ab0e4fbffb6977d0196c7d50bc76cf2d

          SHA1

          680e581c27d67cd1545c810dbb175c2a2a4ef714

          SHA256

          680ad2de8a6cff927822c1d7dd22112a3e8a824e82a7958ee409a7b9ce45ec70

          SHA512

          2bff84a8ec7a26dde8d1bb09792ead8636009c8ef3fa68300a75420197cd7b6c8eaaf8db6a5f97442723e5228afa62961f002948e0eeee8c957c6517547dffba

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\charset_normalizer\md.cp311-win_amd64.pyd
          Filesize

          10KB

          MD5

          fa50d9f8bce6bd13652f5090e7b82c4d

          SHA1

          ee137da302a43c2f46d4323e98ffd46d92cf4bef

          SHA256

          fff69928dea1432e0c7cb1225ab96f94fd38d5d852de9a6bb8bf30b7d2bedceb

          SHA512

          341cec015e74348eab30d86ebb35c028519703006814a2ecd19b9fe5e6fcb05eda6dde0aaf4fe624d254b0d0180ec32adf3b93ee96295f8f0f4c9d4ed27a7c0c

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
          Filesize

          113KB

          MD5

          2d1f2ffd0fecf96a053043daad99a5df

          SHA1

          b03d5f889e55e802d3802d0f0caa4d29c538406b

          SHA256

          207bbae9ddf8bdd64e65a8d600fe1dd0465f2afcd6dc6e28d4d55887cd6cbd13

          SHA512

          4f7d68f241a7f581e143a010c78113154072c63adff5f200ef67eb34d766d14ce872d53183eb2b96b1895aa9c8d4ca82ee5e61e1c5e655ff5be56970be9ebe3e

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\libcrypto-1_1.dll
          Filesize

          3.3MB

          MD5

          9d7a0c99256c50afd5b0560ba2548930

          SHA1

          76bd9f13597a46f5283aa35c30b53c21976d0824

          SHA256

          9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

          SHA512

          cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\libcrypto-1_1.dll
          Filesize

          3.3MB

          MD5

          9d7a0c99256c50afd5b0560ba2548930

          SHA1

          76bd9f13597a46f5283aa35c30b53c21976d0824

          SHA256

          9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

          SHA512

          cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\libssl-1_1.dll
          Filesize

          688KB

          MD5

          bec0f86f9da765e2a02c9237259a7898

          SHA1

          3caa604c3fff88e71f489977e4293a488fb5671c

          SHA256

          d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd

          SHA512

          ffbc4e5ffdb49704e7aa6d74533e5af76bbe5db297713d8e59bd296143fe5f145fbb616b343eed3c48eceaccccc2431630470d8975a4a17c37eafcc12edd19f4

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\python311.dll
          Filesize

          5.5MB

          MD5

          e2bd5ae53427f193b42d64b8e9bf1943

          SHA1

          7c317aad8e2b24c08d3b8b3fba16dd537411727f

          SHA256

          c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

          SHA512

          ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\select.pyd
          Filesize

          29KB

          MD5

          756c95d4d9b7820b00a3099faf3f4f51

          SHA1

          893954a45c75fb45fe8048a804990ca33f7c072d

          SHA256

          13e4d9a734a453a3613e11b6a518430099ad7e3d874ea407d1f9625b7f60268a

          SHA512

          0f54f0262cf8d71f00bf5666eb15541c6ecc5246cd298efd3b7dd39cdd29553a8242d204c42cfb28c537c3d61580153200373c34a94769f102b3baa288f6c398

          Download Submit

        • \Users\Admin\AppData\Local\Temp\_MEI26242\unicodedata.pyd
          Filesize

          1.1MB

          MD5

          58f7988b50cba7b793884f580c7083e1

          SHA1

          d52c06b19861f074e41d8b521938dee8b56c1f2e

          SHA256

          e36d14cf49ca2af44fae8f278e883341167bc380099dac803276a11e57c9cfa1

          SHA512

          397fa46b90582f8a8cd7df23b722204c38544717bf546837c45e138b39112f33a1850be790e248fca5b5ecd9ed7c91cd1af1864f72717d9805c486db0505fb9c

          Download Submit