Resubmissions

10/03/2024, 18:37

240310-w9lm9aac5y 7

05/03/2024, 23:48

240305-3tr9esea78 4

24/02/2024, 15:25

240224-stryjsfe44 7

General

  • Target

    DiscordSetup.exe

  • Size

    91.7MB

  • Sample

    240224-stryjsfe44

  • MD5

    e4ffb4e97fcc52aff2aea87c052ea1f6

  • SHA1

    bcd35d5ebbb42ea569fc0de708530846d564fc0d

  • SHA256

    974fed211f79d0b4ef3d6af92a7c4355ed91b8d4f830787f64daa6b0f2c7dcf1

  • SHA512

    98187f9e3726f237613d95ef41f8f5d3cde85477955c7a9a4ad24b10739e5d5078755d86449d0cc2901e23b6c66f10c73dd2c38d31cfe89a45eacc72f8ba97a2

  • SSDEEP

    1572864:Fhr6Ezlu57o2dqPisSsvdWQtyNDq4vWBFaHqeL5FdRHa+9qnejabmNXHPBCx2LoK:/+Ezlu5c2dJavASyYxjaKeFF7Ha+96e1

Malware Config

Targets

    • Target

      DiscordSetup.exe

    • Size

      91.7MB

    • MD5

      e4ffb4e97fcc52aff2aea87c052ea1f6

    • SHA1

      bcd35d5ebbb42ea569fc0de708530846d564fc0d

    • SHA256

      974fed211f79d0b4ef3d6af92a7c4355ed91b8d4f830787f64daa6b0f2c7dcf1

    • SHA512

      98187f9e3726f237613d95ef41f8f5d3cde85477955c7a9a4ad24b10739e5d5078755d86449d0cc2901e23b6c66f10c73dd2c38d31cfe89a45eacc72f8ba97a2

    • SSDEEP

      1572864:Fhr6Ezlu57o2dqPisSsvdWQtyNDq4vWBFaHqeL5FdRHa+9qnejabmNXHPBCx2LoK:/+Ezlu5c2dJavASyYxjaKeFF7Ha+96e1

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks