General
-
Target
https://github.com/Ghazouai/Image-Logger-V4
-
Sample
240424-elp74aef81
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/Ghazouai/Image-Logger-V4
Resource
win11-20240412-en
windows11-21h2-x64
26 signatures
1800 seconds
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTE5MzQ4MTk4Mzc5MjI1NTA1Ng.G4n7Tu.-ruWZdF2N09-odd0zZspsBjCwqwTg6xYcP4MSg
-
server_id
1193474814220967958
Targets
-
-
Target
https://github.com/Ghazouai/Image-Logger-V4
Score10/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-