Overview
overview
8Static
static
3AdvancedSt...er.dll
windows11-21h2-x64
8AngleSharp.dll
windows11-21h2-x64
1AsyncKeyedLock.dll
windows11-21h2-x64
1Cogwheel.dll
windows11-21h2-x64
1DiscordCha...re.dll
windows11-21h2-x64
1DiscordCha...er.exe
windows11-21h2-x64
1DiscordCha...er.exe
windows11-21h2-x64
1Gress.dll
windows11-21h2-x64
1JsonExtensions.dll
windows11-21h2-x64
1MaterialDe...rs.dll
windows11-21h2-x64
1MaterialDe...pf.dll
windows11-21h2-x64
1Microsoft....rs.dll
windows11-21h2-x64
1Onova.dll
windows11-21h2-x64
1Polly.Core.dll
windows11-21h2-x64
1Polly.dll
windows11-21h2-x64
1RazorBlade.dll
windows11-21h2-x64
1Stylet.dll
windows11-21h2-x64
1Superpower.dll
windows11-21h2-x64
1WebMarkupMin.Core.dll
windows11-21h2-x64
1YoutubeExplode.dll
windows11-21h2-x64
1Analysis
-
max time kernel
449s -
max time network
1175s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-05-2024 05:11
Static task
static1
Behavioral task
behavioral1
Sample
AdvancedStringBuilder.dll
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
AngleSharp.dll
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
AsyncKeyedLock.dll
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
Cogwheel.dll
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
DiscordChatExporter.Core.dll
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
DiscordChatExporter.exe
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
DiscordChatExporter.exe
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
Gress.dll
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
JsonExtensions.dll
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
MaterialDesignColors.dll
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
MaterialDesignThemes.Wpf.dll
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win11-20240426-en
Behavioral task
behavioral13
Sample
Onova.dll
Resource
win11-20240426-en
Behavioral task
behavioral14
Sample
Polly.Core.dll
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
Polly.dll
Resource
win11-20240419-en
Behavioral task
behavioral16
Sample
RazorBlade.dll
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
Stylet.dll
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
Superpower.dll
Resource
win11-20240508-en
Behavioral task
behavioral19
Sample
WebMarkupMin.Core.dll
Resource
win11-20240419-en
Behavioral task
behavioral20
Sample
YoutubeExplode.dll
Resource
win11-20240426-en
General
-
Target
DiscordChatExporter.exe
-
Size
116KB
-
MD5
33827bc09a995837251064aea4c645b2
-
SHA1
eb4946b8f731d92bff103d34198d9292b9d40ca9
-
SHA256
b11c0b771c0d7230a48adac51d2dbc158ed45dffee517e9d41abc558d8386e92
-
SHA512
76f266e7a54772d52bdc26f19b113bbba8e7b25d9d483c6e98169e1da309a46d2bb11620ce07ffaff7d7e699981dcf79e13d5702cfeeb3e3cb5095bd7fbfc30e
-
SSDEEP
1536:Su8FjAgy/opsBkbG+JrlO8zry5PcP6ehiTJ3co3fsPrTRRUb/kazFCh:Su8jRsB8Gig8zryGP6e6/IrTRu/zF+
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
DiscordChatExporter.exepid process 2340 DiscordChatExporter.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2340-0-0x00007FFDCB605000-0x00007FFDCB606000-memory.dmpFilesize
4KB
-
memory/2340-1-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmpFilesize
9.6MB
-
memory/2340-2-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmpFilesize
9.6MB
-
memory/2340-4-0x00007FFDCB605000-0x00007FFDCB606000-memory.dmpFilesize
4KB
-
memory/2340-5-0x00007FFDCB350000-0x00007FFDCBCF1000-memory.dmpFilesize
9.6MB