Analysis

  • max time kernel
    449s
  • max time network
    1175s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    23-05-2024 05:11

General

  • Target

    DiscordChatExporter.exe

  • Size

    116KB

  • MD5

    33827bc09a995837251064aea4c645b2

  • SHA1

    eb4946b8f731d92bff103d34198d9292b9d40ca9

  • SHA256

    b11c0b771c0d7230a48adac51d2dbc158ed45dffee517e9d41abc558d8386e92

  • SHA512

    76f266e7a54772d52bdc26f19b113bbba8e7b25d9d483c6e98169e1da309a46d2bb11620ce07ffaff7d7e699981dcf79e13d5702cfeeb3e3cb5095bd7fbfc30e

  • SSDEEP

    1536:Su8FjAgy/opsBkbG+JrlO8zry5PcP6ehiTJ3co3fsPrTRRUb/kazFCh:Su8jRsB8Gig8zryGP6e6/IrTRu/zF+

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe
    "C:\Users\Admin\AppData\Local\Temp\DiscordChatExporter.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2340-0-0x00007FFDCB605000-0x00007FFDCB606000-memory.dmp
    Filesize

    4KB

  • memory/2340-1-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmp
    Filesize

    9.6MB

  • memory/2340-2-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmp
    Filesize

    9.6MB

  • memory/2340-4-0x00007FFDCB605000-0x00007FFDCB606000-memory.dmp
    Filesize

    4KB

  • memory/2340-5-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmp
    Filesize

    9.6MB