Overview
overview
4Static
static
3owo bot/başlat.bat
windows7-x64
1owo bot/başlat.bat
windows10-2004-x64
1owo bot/bot.js
windows7-x64
1owo bot/bot.js
windows10-2004-x64
1owo bot/info.rtf
windows7-x64
4owo bot/info.rtf
windows10-2004-x64
1owo bot/licence.rtf
windows7-x64
4owo bot/licence.rtf
windows10-2004-x64
1owo bot/no...DME.js
windows7-x64
1owo bot/no...DME.js
windows10-2004-x64
1owo bot/no...uws.js
windows7-x64
1owo bot/no...uws.js
windows10-2004-x64
1owo bot/no...8.node
macos-10.15-amd64
1owo bot/no...1.node
macos-10.15-amd64
1owo bot/no...7.node
macos-10.15-amd64
1owo bot/no...9.node
macos-10.15-amd64
1owo bot/no...4.node
macos-10.15-amd64
1owo bot/no...8.node
ubuntu-18.04-amd64
1owo bot/no...1.node
ubuntu-18.04-amd64
1owo bot/no...7.node
ubuntu-18.04-amd64
1owo bot/no...9.node
ubuntu-18.04-amd64
1owo bot/no...4.node
ubuntu-18.04-amd64
1owo bot/no...48.dll
windows7-x64
1owo bot/no...48.dll
windows10-2004-x64
1owo bot/no...51.dll
windows7-x64
1owo bot/no...51.dll
windows10-2004-x64
1owo bot/no...57.dll
windows7-x64
1owo bot/no...57.dll
windows10-2004-x64
1owo bot/no...59.dll
windows7-x64
1owo bot/no...59.dll
windows10-2004-x64
1owo bot/no...64.dll
windows7-x64
1owo bot/no...64.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
144s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
11/10/2023, 19:06
Static task
static1
Behavioral task
behavioral1
Sample
owo bot/başlat.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
owo bot/başlat.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
owo bot/bot.js
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
owo bot/bot.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
owo bot/info.rtf
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
owo bot/info.rtf
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
owo bot/licence.rtf
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
owo bot/licence.rtf
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
owo bot/node_modules/@discordjs/uws/README.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
owo bot/node_modules/@discordjs/uws/README.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
owo bot/node_modules/@discordjs/uws/uws.js
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
owo bot/node_modules/@discordjs/uws/uws.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
owo bot/node_modules/@discordjs/uws/uws_darwin_48.node
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
owo bot/node_modules/@discordjs/uws/uws_darwin_51.node
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
owo bot/node_modules/@discordjs/uws/uws_darwin_57.node
Resource
macos-20220504-en
Behavioral task
behavioral16
Sample
owo bot/node_modules/@discordjs/uws/uws_darwin_59.node
Resource
macos-20220504-en
Behavioral task
behavioral17
Sample
owo bot/node_modules/@discordjs/uws/uws_darwin_64.node
Resource
macos-20220504-en
Behavioral task
behavioral18
Sample
owo bot/node_modules/@discordjs/uws/uws_linux_48.node
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral19
Sample
owo bot/node_modules/@discordjs/uws/uws_linux_51.node
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral20
Sample
owo bot/node_modules/@discordjs/uws/uws_linux_57.node
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral21
Sample
owo bot/node_modules/@discordjs/uws/uws_linux_59.node
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral22
Sample
owo bot/node_modules/@discordjs/uws/uws_linux_64.node
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral23
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_48.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_48.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_51.dll
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_51.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_57.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_57.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_59.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_59.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_64.dll
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
owo bot/node_modules/@discordjs/uws/uws_win32_64.dll
Resource
win10v2004-20230915-en
General
-
Target
owo bot/node_modules/@discordjs/uws/uws_darwin_57.node
-
Size
380KB
-
MD5
81b234259d91269b041b5c5d4100dcfb
-
SHA1
f96ca648d42ee1e4e87e63bfcb740c79dbfaebb2
-
SHA256
5682dbf8a4a95f8cc8166192af4fd96f73c4e35b37d86f85424f695aeb355881
-
SHA512
37901c109ed4a34c5a8a854b3e8d8072f42af9e15c82995d5fa4bf0b40d67aac179d622502a15791bbec5ad10f95abc5e1cbd1b60373d272eb0dc614550c16c0
-
SSDEEP
6144:rB30S1QThY/546gIDCCNCJgO+e9AshZGAmL//jNL4ckLLVjtr84L33/MMoYchG/6:rB30S1QThY/546gI5UmeuAm
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node\""1⤵PID:515
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node\""1⤵PID:515
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node\""1⤵PID:515
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node"1⤵PID:515
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node"1⤵PID:515
-
/bin/zsh/bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node"2⤵PID:516
-
-
/bin/zsh/bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_57.node"2⤵PID:516
-
-
/Users/run/owo/Users/run/owo "bot/node_modules/@discordjs/uws/uws_darwin_57.node"2⤵PID:516
-
-
/Users/run/owo/Users/run/owo "bot/node_modules/@discordjs/uws/uws_darwin_57.node"2⤵PID:516
-