Overview
overview
5Static
static
3BetterDisc...ws.exe
windows7-x64
5BetterDisc...ws.exe
windows10-2004-x64
5$PLUGINSDI...ge.dll
windows7-x64
1$PLUGINSDI...ge.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3BetterDiscord.exe
windows7-x64
5BetterDiscord.exe
windows10-2004-x64
5LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1d3dcompiler_47.dll
windows7-x64
3d3dcompiler_47.dll
windows10-2004-x64
3ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
3libGLESv2.dll
windows10-2004-x64
3locales/zh-TW.pak
windows7-x64
3locales/zh-TW.pak
windows10-2004-x64
3resources.pak
windows7-x64
3resources.pak
windows10-2004-x64
3resources/app.js
windows7-x64
1resources/app.js
windows10-2004-x64
1resources/...n.icns
windows7-x64
3resources/...n.icns
windows10-2004-x64
3resources/...on.ico
windows7-x64
3resources/...on.ico
windows10-2004-x64
3resources/...nd.png
windows7-x64
3resources/...nd.png
windows10-2004-x64
3Analysis
-
max time kernel
140s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01-02-2024 17:38
Static task
static1
Behavioral task
behavioral1
Sample
BetterDiscord-Windows.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
BetterDiscord-Windows.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BgImage.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BgImage.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
BetterDiscord.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
BetterDiscord.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
LICENSES.chromium.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
d3dcompiler_47.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
d3dcompiler_47.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
ffmpeg.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
ffmpeg.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
libEGL.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
libEGL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
libGLESv2.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
libGLESv2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
locales/zh-TW.pak
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
locales/zh-TW.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
resources.pak
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
resources.pak
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
resources/app.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
resources/app.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
resources/assets/icon.icns
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
resources/assets/icon.icns
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
resources/assets/icon.ico
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
resources/assets/icon.ico
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
resources/assets/images/background.png
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
resources/assets/images/background.png
Resource
win10v2004-20231215-en
General
-
Target
resources/assets/icon.icns
-
Size
46KB
-
MD5
8f80ca9ee10705d617566a041ccfe010
-
SHA1
531c952d46864e1a295c765e236d31147c5b7dbf
-
SHA256
a4dc3ce7a64207d10d15c4c537599f47b4ec1f16b53dbf3a92466d050ed4fcc5
-
SHA512
ad1184a361b1645c6ec9be311bedf46f1518060e558da758e01fb56d7668b4b611bb1b320f8664c53958d6192c5f3d16c2f7643c2e99246fc6e1fe41bec72ad3
-
SSDEEP
768:DEE/FGBpID9deCikSY4CbB5k1yBte6eLjjuX5V6S/00wnkKhVLXCe6sP:YE/FGBpID9dvhd4C95Ey2HX0N/3mLXGy
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1815711207-1844170477-3539718864-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1815711207-1844170477-3539718864-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 1804 OpenWith.exe