Analysis

  • max time kernel
    90s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-02-2024 04:54

General

  • Target

    DiscordChatExporter.exe

  • Size

    116KB

  • MD5

    33827bc09a995837251064aea4c645b2

  • SHA1

    eb4946b8f731d92bff103d34198d9292b9d40ca9

  • SHA256

    b11c0b771c0d7230a48adac51d2dbc158ed45dffee517e9d41abc558d8386e92

  • SHA512

    76f266e7a54772d52bdc26f19b113bbba8e7b25d9d483c6e98169e1da309a46d2bb11620ce07ffaff7d7e699981dcf79e13d5702cfeeb3e3cb5095bd7fbfc30e

  • SSDEEP

    1536:Su8FjAgy/opsBkbG+JrlO8zry5PcP6ehiTJ3co3fsPrTRRUb/kazFCh:Su8jRsB8Gig8zryGP6e6/IrTRu/zF+

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe
    "C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2504-0-0x00007FFE500A0000-0x00007FFE50A41000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-1-0x0000000000C30000-0x0000000000C40000-memory.dmp

    Filesize

    64KB

  • memory/2504-2-0x00007FFE500A0000-0x00007FFE50A41000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-4-0x00007FFE500A0000-0x00007FFE50A41000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-5-0x0000000000C30000-0x0000000000C40000-memory.dmp

    Filesize

    64KB