a1e69d9bcb8a456adb022fe4629bfddf0832b6b4bfee0486e09038dbe05ea581

Sharing

Copy URL Twitter E-mail

General

Target
DiscordGenerator-main.zip
Size 24KB
Sample240420-wc5d4aed41
SHA256 a1e69d9bcb8a456adb022fe4629bfddf0832b6b4bfee0486e09038dbe05ea581
MD5 5d43037d4489aa1a3b823c5b226c7305
SHA1 7fab154cce6e44aec45b0075660a3e17ee9bfb63
SHA512 55886a8f3bba5017c0adb65619fd1eb3c3f4a637433445d53618ef0df589fd71571718ee50822436956d292fbf5df0cc55eb1ffba42d71b0a63764451981b9c0
SSDEEP 384:CHVbCEh/70cpShMoU8bbL92+hVCuKGPj0NBGt+wNmM3XViFbHfy8qjqevHn:0CER7pNX8nL9XhVCuKeQENOb6/jjv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  DiscordGenerator-main.zip
- Size 24KB
- SHA256 a1e69d9bcb8a456adb022fe4629bfddf0832b6b4bfee0486e09038dbe05ea581
- MD5 5d43037d4489aa1a3b823c5b226c7305
- SHA1 7fab154cce6e44aec45b0075660a3e17ee9bfb63
- SHA512 55886a8f3bba5017c0adb65619fd1eb3c3f4a637433445d53618ef0df589fd71571718ee50822436956d292fbf5df0cc55eb1ffba42d71b0a63764451981b9c0
- SSDEEP 384:CHVbCEh/70cpShMoU8bbL92+hVCuKGPj0NBGt+wNmM3XViFbHfy8qjqevHn:0CER7pNX8nL9XhVCuKeQENOb6/jjv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  DiscordGenerator-main/LICENSE
- Size 34KB
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

evasion
behavioral3 behavioral4
- Target
  DiscordGenerator-main/README.md
- Size 4KB
- SHA256 d4bb1401005dc50ae8041d7d4d28de5fa41813e8ef2c945f63df778c9a5ed853
- MD5 cd6f291844e59916e7e60663ba1bbe32
- SHA1 e0946bbf2e9f528009f43dbcaca15d7e2f39c805
- SHA512 66d642179fa72ee8a2d47aaa3612570ab48007cf7b7a1f4ffa9fac6b5223e6dc01ebb683b7c99099c458b1120c973288620f165146e19245ea10899e8546cb92
- SSDEEP 96:4mvzCkNDNErj+1pD1Mx9C6NBUWTMrrt4UQLL+TUSixSUVSjKr:4mmcJya1pxMXCiArpdQEk+e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  DiscordGenerator-main/changelog.md
- Size 1KB
- SHA256 cbed9160d1ffcb88f2212039936c3a69a76cc919c89b901ee51db8edfd349ef5
- MD5 b208055988b0abfd1e20d2f169f7e36c
- SHA1 e7e68c02afc78fe52973b7100d6f44b357110ad7
- SHA512 0b49aac2dd36bdd160b4b7db1b2d899fc3e5d6bf2d0b0c41153a7fef40b35ff120936f9d66ce3ea3322bc99ab439ed08be14a2de07e936ebc99a95e5a601d1e7
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  DiscordGenerator-main/contributing.md
- Size 1KB
- SHA256 ae078e35f83847ff57d098004531861f22aa05f427764d73cb45a9d35edf1b66
- MD5 e9c35acae14db6aca7b72aa102f59d2f
- SHA1 35f32e0f975f6d440723e5983c81c55721eb9264
- SHA512 1d79a4a00b5aea79055e6122c8e0042f9f25a700ef27cda37dd2378ecd5b4acd0ae80da46d86bfec3a34e70f1e6fff442dc77be72a5e66f50c24e477ef17d06f
- MD5 SHA1 SHA512
Score

10^/10

evasion phishing
- Detected phishing page
  phishing
behavioral10 behavioral9
- Target
  DiscordGenerator-main/main.py
- Size 15KB
- SHA256 29fa18797410f68867ff6a9ded9d1c0f0a47c8c61402af515120f6864a6963e9
- MD5 a494c6689a76fff770a2b4d94bdcce46
- SHA1 624bcb27485e8da97462c68b045c17be6e268b8e
- SHA512 4cb8fe599d0c4c2203aa7b17ce8283b195959cc3c435ca508b3a04791dcf0b02e093cadf9154a2100cabe77a8eefb51f40f9912a6df7f9bd221eb46abd159813
- SSDEEP 192:zKJ//l14uBbgLTZDY/JT/tHABGfcg5Ts7djvrw7AwvsZEKdTbW1ggfgBEresyG4C:uJT4+gLNYx+BrgR+M7KZbOh9resP
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

phishing evasion
- Detected phishing page
  phishing
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral11 behavioral12
- Target
  DiscordGenerator-main/modules/discord.py
- Size 9KB
- SHA256 452f22bb7eab85016d48677622c592e32fe1d09c9c91dccde5aea822cc1f03e9
- MD5 f572baab116b65700413f04a6a8275ba
- SHA1 a9967bafa83a69e365c27b84a562948b422061fa
- SHA512 a7b9d3a09dea16ba556b43f9516cec3fc7ad48b36f8e8af5488ac4d910bcdf4b87d78dd2004bf1ce8bf948453c3a18745daafd59634cefec3a41d21b75d6cb34
- SSDEEP 192:UFlRgfa4Rk++iaBD/rmgj3m61vDnQpg734UxZi0:kgi4R/+iaBrrnj3Z1vDnQW73Hi0
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

evasion
behavioral13 behavioral14
- Target
  DiscordGenerator-main/modules/tempmail.py
- Size 3KB
- SHA256 a95b42fcc4141909ec3e761c766240be4f91592af6eb2efb5f60cc65904218b5
- MD5 14b46a9df01e3b578dac6dc6321e9c16
- SHA1 6e72e8a20295d709131ce690b77bf7cb20175882
- SHA512 63668247b93acb5dcb4846bddcf02cb4d4d7166dd33048714f7550725eff3c0724d88bc8e4ad50c95eed23fca546b7214313280eceeeed0ce62dc5798cbb78ff
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  DiscordGenerator-main/requirements.txt
- Size 42B
- SHA256 68c2c5abe1f106b2d68a4729930e6627e4b909bed0450e79dc949534182071b3
- MD5 e6da06efcbfec37b8e26e041e92acc87
- SHA1 6173755c75730351dc05ce3fee24baf0e9f8beed
- SHA512 0e35be1c4a52581f969b51e686c2abf49ba48d74a26368a5aa9756cf259192279b3febd43519acc70f33f167c04d1a8ffb68c4100da6d78ced9c8e00cdea6688
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detected phishing page

Detected phishing page

Looks up external IP address via web service

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18