General

  • Target

    Tundra.zip

  • Size

    76.3MB

  • Sample

    240315-z4h7qadc72

  • MD5

    98dd7baebe34769f1b861351ba59e837

  • SHA1

    4e360bc5654a9a0c5faaddd612ca90c354e824bf

  • SHA256

    02bb1795f3a24a0732cec0c27bb62d46f866b838d25546c990a0de6e9ec0f9db

  • SHA512

    7644b0de9fee4b94d5093f5dbc92a60fb7f7e502ec1c2d99db69b365932b797122ec376a4343bcf3708ad4d5bc2fa147339c57d361fb12fcae3ecc0d7b5873e7

  • SSDEEP

    1572864:lRrPFRwCS+CgtsZfkLlJG1i1bSFwtTL1tUh8xFiqDRCYGmvOw6UklmEmiGWiJ1Q:lRrPACS+72FOY1i1LZ8axFrMYH6xlmve

Score
10/10

Malware Config

Targets

    • Target

      discord_token_grabber.pyc

    • Size

      15KB

    • MD5

      990bb1210323b8968b180576cf8114d6

    • SHA1

      a4e11d7cdeb37fb32d768085263ff9fd4e51ac0b

    • SHA256

      b4a60b0e4f82707a8c5fb7f3fc0cc78576c7b45217617185ab34a90e2e052208

    • SHA512

      43d1e9db58d160b15d6daf5677f2f63ed8f3fa494a886bf07d229829ffc84af17f9c81f61bdbf23dfa54a1bebafa7e562f805848b64de08bc8cf83fe98a2188a

    • SSDEEP

      384:YGC7RYmnXavkxzG7WltcrhntQ5saa2h12VA:YGCuvk8WltcrttQ5saaCsVA

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks