Overview

overview

7

Static

static

3

DISCORD TO...st.exe

windows10-2004-x64

7

DISCORD TO...hi.exe

windows10-2004-x64

DISCORD TO...rv.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DISCORD TOOL.rar

  • Size

    23.9MB

  • Sample

    230704-2emvqahg95

  • MD5

    1ee2e53a3b69461745b704f428f74c88

  • SHA1

    6c03b5337cdb4c648cf4956810e14f0c96f4f9d5

  • SHA256

    c7f83b92fe483c090b7705bcd4db8670bf8ad57da824a90a96e5c16d295ef37b

  • SHA512

    ef9c39c6f0ab48d3297edebad9994307553c68b74a52ff1fd2cb3944f2bfeb5b4c8c2b97a831106c4953a353e65006c8182c2e599e3493deb96888766a670151

  • SSDEEP

    393216:ZEFWIk9f7VtrPSnuzBMXY8QCfxs4k/QakPhjICIpr0frgb8gpmDlx1kyKB:KWl9f3Gn6FOe4k/1kiCGrMI8ymDdnKB

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      DISCORD TOOL/boost.exe

    • Size

      25.9MB

    • MD5

      a90217b5fa644a5fe8eebaa5e4af806c

    • SHA1

      c414c2773227371ff55cb097f41e8c3f82605fb8

    • SHA256

      c37adae6b59b748b956414a9cf6fa5a88aff36771750f3668e3177d92c6e490c

    • SHA512

      4b7a96466d4bd37808a560bd9a3f3fccd37d31097b40f361cef9cffb966b1156afff69b3139f9a1370d4fc64932046aa9096c2929b4b30e19afc33c560099c0b

    • SSDEEP

      393216:QyOpVLF+nVPm2QaFqyYgsSVXGNrTsGa3aID:ifF+nVPm2QR90

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

    • Target

      DISCORD TOOL/x64/hamachi.sys

    • Size

      33KB

    • MD5

      1e6438d4ea6e1174a3b3b1edc4de660b

    • SHA1

      529ce8bedd67c9944ea60e2b17915676ce71cbf5

    • SHA256

      f9995cfec7bbfe10b06eee04ca6b49658275c43096e57747bff9c2c31a0f9011

    • SHA512

      694b0afab98a18976e37dc6be70e93bfc3712afee80835a5bee6a12894e68cc1c01e2e2f4c30c70d24408e2c44d09dbbd097d6b569831a5c683e03457c44262d

    • SSDEEP

      768:VxatCBmdw9LrDi8pIhFFFWZe3k5j5ikXLrNQMIL7QbAmhX:DatCEqaDFtyikXHqMI/EPhX

    Score
    1/10
    behavioral2

    • Target

      DISCORD TOOL/x64/hamdrv.sys

    • Size

      44KB

    • MD5

      7f79205b4efa98f0767309479c8c01c6

    • SHA1

      9d546dda7536a85a3f4228e065967be1648ad901

    • SHA256

      4b576903a83f33a8cf31d3887144a3d51c56d1187115c83ac99c0e9f6b4bf128

    • SHA512

      418ac89f3c5996de50c846693995145e314d0cd7edee59f0cdc212720d84be1351827c7ab02e870d1940288f5c4838d39c77fbc9847b69ab5fce5d74400c19ca

    • SSDEEP

      768:YCMEBIRBvJnaUnrZGI71bgw16vkWPVqRxO2EpUwwRbT3zf66Y++:1hIRBLFgw16vkWtqzPwwRbTjy6X+

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix

Tasks