Overview
overview
6Static
static
1URLScan
urlscan
1http://discord.com/a...
windows10-2004-x64
6http://discord.com/a...
android-9-x86
6http://discord.com/a...
android-10-x64
6http://discord.com/a...
android-11-x64
6http://discord.com/a...
ubuntu-18.04-amd64
3http://discord.com/a...
debian-9-armhf
http://discord.com/a...
debian-9-mips
http://discord.com/a...
debian-9-mipsel
Analysis
-
max time kernel
606s -
max time network
606s -
platform
android_x64 -
resource
android-x64-arm64-20240603-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system -
submitted
06-06-2024 10:57
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://discord.com/app
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
http://discord.com/app
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral3
Sample
http://discord.com/app
Resource
android-x64-20240603-en
Behavioral task
behavioral4
Sample
http://discord.com/app
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral5
Sample
http://discord.com/app
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral6
Sample
http://discord.com/app
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
http://discord.com/app
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
http://discord.com/app
Resource
debian9-mipsel-20240226-en
General
-
Target
http://discord.com/app
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.android.chromedescription ioc process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.android.chromedescription ioc process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100KB
MD5fdb164c6f62d435d7001af7558403590
SHA12b8c45e58550fe9081e1cc57f370458d75c5180f
SHA256b29c3c56b71edb939383d11c84665717a57f46c53fc3ce6714f46fd037de58d0
SHA512d06b9829ba550ff43b42c5bc6b543fe4205ca9bcc5ee7a0574e5cdab5013039da2d888a243b9780ec351f9c33813998f92b0b87ad7b41542b5c8b8ae563c9958