Extracted

• • Target
    Onnx File Installer.exe
  • Size 78KB
  • SHA256 2a470ef5fe5f825bf643a3d1fa819659857513a2c81cdc9a0305235617dc1b04
  • MD5 e35f5c4a4d3763f1c9ea5ae6001c6ae4
  • SHA1 32869af3cae52873656cfc64f4c169151c2bdd7d
  • SHA512 8d3045ce0304c45a3be7a046940c6453c08386d5697e721161ac9f6cc5dfc68deecdbc5de94045153963e0810c486d9ceaa9e3229c60b7121cc85be57700645e
  • SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2
• • Target
    api-ms-win-crt-stdio-l1-1-0.dll
  • Size 26KB
  • SHA256 e6a1ef1f7c1957c50a3d9c1d70c0f7b0d8badc7f279cd056eb179dc256bfefda
  • MD5 5df2410c0afd30c9a11de50de4798089
  • SHA1 4112c5493009a1d01090ccae810500c765dc6d54
  • SHA512 8ecb79078d05d5b2a432f511953985b3253d5d43d87709a5795709ee8dbca63c5f1166ed94d8984c13f2ea06adfa7d6b82c6735c23c6e64f2f37a257066864e6
  • SSDEEP 384:WnZpFVhXWfhW2Lm0Gfi3RKllGBwLeb+Jl0huSwpSs:a+rRlkLelhepSs
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3
• • Target
    api-ms-win-crt-string-l1-1-0.dll
  • Size 26KB
  • SHA256 e71d517e6b7039437e3fc449d8ad12eeeca0d5c8ed1c500555344fd90ddc3207
  • MD5 aacade02d7aaf6b5eff26a0e3a11c42d
  • SHA1 93b8077b535b38fdb0b7c020d24ba280adbe80c3
  • SHA512 e02fcbcb70100f67e65903d8b1a7e6314cabfb0b14797bd6e1c92b7bcb3994a54133e35d16da0a29576145b2783221330591526f856b79a25c0575fc923985a6
  • SSDEEP 768:96S5yguNvZ5VQgx3SbwA71IkFD7RwL9il:9l5yguNvZ5VQgx3SbwA71IEVwL9il
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral4
• • Target
    libcurl.dll
  • Size 522KB
  • SHA256 ee94e2201870536522047e6d7fe7b903a63cd2e13e20c8fffc86d0e95361e671
  • MD5 e31f5136d91bad0fcbce053aac798a30
  • SHA1 ee785d2546aec4803bcae08cdebfd5d168c42337
  • SHA512 a1543eb1d10d25efb44f9eaa0673c82bfac5173055d04c0f3be4792984635a7c774df57a8e289f840627754a4e595b855d299070d469e0f1e637c3f35274abe6
  • SSDEEP 12288:InAnSwPc/1BzyLmI2MB1MqcUfCKHU1XAfK6ae:I6Pc/1BOKtaeqcUaZXm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6