Analysis
-
max time kernel
0s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
23/12/2023, 11:18
General
-
Target
DiscordChatExporter.Core.pdb
-
Size
92KB
-
MD5
cd50a3e79c702faa7b2799a48a7e4bc8
-
SHA1
f1d7800f7865b7a216be426d13957da03d0d0f91
-
SHA256
124bf5286e8fbcc11a4c5612480e3472ac7fec3d6b1dbdadeb65dcb9e8ffa82b
-
SHA512
017e35c422ab961d857a6cfac527d7324c0457ec436db5f8e0b6324de6c89df504d258060392c07b5e5933cf447f46d31083e8d79061acf02bbebeeee22351dd
-
SSDEEP
1536:dmy/QkRmjUFRiU7feTDVJCwuwm7pDQDC3e9mDtC07UsRA+Aa0V7NYkxUGBZBK:dm2J5Mlm7pDYr9YtVUsuHai7/3g
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.Core.pdb1⤵
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵