Overview
overview
10Static
static
1DiscordGen...in.zip
windows11-21h2-x64
1DiscordGen...in.zip
macos-10.15-amd64
1DiscordGen...ICENSE
windows11-21h2-x64
1DiscordGen...ICENSE
macos-10.15-amd64
4DiscordGen...DME.md
windows11-21h2-x64
3DiscordGen...DME.md
macos-10.15-amd64
1DiscordGen...log.md
windows11-21h2-x64
3DiscordGen...log.md
macos-10.15-amd64
1DiscordGen...ing.md
windows11-21h2-x64
3DiscordGen...ing.md
macos-10.15-amd64
10DiscordGen...ain.py
windows11-21h2-x64
10DiscordGen...ain.py
macos-10.15-amd64
4DiscordGen...ord.py
windows11-21h2-x64
3DiscordGen...ord.py
macos-10.15-amd64
4DiscordGen...ail.py
windows11-21h2-x64
3DiscordGen...ail.py
macos-10.15-amd64
1DiscordGen...ts.txt
windows11-21h2-x64
3DiscordGen...ts.txt
macos-10.15-amd64
1Analysis
- max time kernel
147s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20240412-en - resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system - submitted
20/04/2024, 17:47
Static task
static1
Behavioral task
behavioral1
Sample
DiscordGenerator-main.zip
Resource
win11-20240412-en
Behavioral task
behavioral2
Sample
DiscordGenerator-main.zip
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
DiscordGenerator-main/LICENSE
Resource
win11-20240412-en
Behavioral task
behavioral4
Sample
DiscordGenerator-main/LICENSE
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
DiscordGenerator-main/README.md
Resource
win11-20240412-en
Behavioral task
behavioral6
Sample
DiscordGenerator-main/README.md
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
DiscordGenerator-main/changelog.md
Resource
win11-20240412-en
Behavioral task
behavioral8
Sample
DiscordGenerator-main/changelog.md
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
DiscordGenerator-main/contributing.md
Resource
win11-20240412-en
Behavioral task
behavioral10
Sample
DiscordGenerator-main/contributing.md
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
DiscordGenerator-main/main.py
Resource
win11-20240412-en
Behavioral task
behavioral12
Sample
DiscordGenerator-main/main.py
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
DiscordGenerator-main/modules/discord.py
Resource
win11-20240412-en
Behavioral task
behavioral14
Sample
DiscordGenerator-main/modules/discord.py
Resource
macos-20240410-en
Behavioral task
behavioral15
Sample
DiscordGenerator-main/modules/tempmail.py
Resource
win11-20240412-en
Behavioral task
behavioral16
Sample
DiscordGenerator-main/modules/tempmail.py
Resource
macos-20240410-en
Behavioral task
behavioral17
Sample
DiscordGenerator-main/requirements.txt
Resource
win11-20240412-en
Behavioral task
behavioral18
Sample
DiscordGenerator-main/requirements.txt
Resource
macos-20240410-en
General
- Target DiscordGenerator-main/changelog.md
- Size 1KB
- Sample240420-wc5d4aed41
- SHA256 cbed9160d1ffcb88f2212039936c3a69a76cc919c89b901ee51db8edfd349ef5
- MD5 b208055988b0abfd1e20d2f169f7e36c
- SHA1 e7e68c02afc78fe52973b7100d6f44b357110ad7
- SHA512 0b49aac2dd36bdd160b4b7db1b2d899fc3e5d6bf2d0b0c41153a7fef40b35ff120936f9d66ce3ea3322bc99ab439ed08be14a2de07e936ebc99a95e5a601d1e7
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-801878912-692986033-442676226-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-801878912-692986033-442676226-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1480 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\DiscordGenerator-main\changelog.md1⤵
- Modifies registry class
PID:4128
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1480