Analysis

  • max time kernel
    0s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2024 20:34

General

  • Target

    dist/win-unpacked/resources/BotFiles/node_modules/discord-anti-spam/docs/index.html

  • Size

    6KB

  • MD5

    54423b0200c89093392bb48cdfbd64c2

  • SHA1

    d8d4dbffaebcb738ed15bca2276e0616fda87848

  • SHA256

    996d79d143eac5733a785631d0cbf7c109e52bd796adc23669ec1040e92f5803

  • SHA512

    fce1eda6e5b54e34af130efdd25297da1a99565024bf1358d9a6db2ee114fc2693da6a35efccae1b79bdaf2e0c1005d802d476c2a8c73f42ca8c1df705947e05

  • SSDEEP

    96:G2EEBcBEPXp0WRGReRausHwlVTTEh3wPu8TBA4MlGv50kCSrBF06bp:G6QmXlsEwH2PEhgPa4M8mKrBF06bp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dist\win-unpacked\resources\BotFiles\node_modules\discord-anti-spam\docs\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5596
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5596 CREDAT:17410 /prefetch:2
      2⤵
        PID:5360

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads