Overview
overview
7Static
static
3DiscordBot...64.exe
windows10-1703-x64
3$PLUGINSDI...er.dll
windows10-1703-x64
1$PLUGINSDI...ls.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...ll.dll
windows10-1703-x64
3resources/...ord.js
windows10-1703-x64
3resources/...sor.js
windows10-1703-x64
3resources/...ert.js
windows10-1703-x64
3resources/...e64.js
windows10-1703-x64
3resources/...act.js
windows10-1703-x64
3resources/...der.js
windows10-1703-x64
3resources/...ter.js
windows10-1703-x64
3resources/...ect.js
windows10-1703-x64
3resources/...int.js
windows10-1703-x64
3resources/...dex.js
windows10-1703-x64
3resources/...act.js
windows10-1703-x64
3resources/...ngs.js
windows10-1703-x64
3resources/...ase.js
windows10-1703-x64
3resources/...act.js
windows10-1703-x64
3resources/...ype.js
windows10-1703-x64
3resources/...eof.js
windows10-1703-x64
3resources/...ong.js
windows10-1703-x64
3resources/...tf8.js
windows10-1703-x64
3resources/...der.js
windows10-1703-x64
3resources/...ter.js
windows10-1703-x64
3resources/...ype.js
windows10-1703-x64
3resources/...ate.js
windows10-1703-x64
3resources/...als.js
windows10-1703-x64
3resources/...nfo.js
windows10-1703-x64
3$PLUGINSDI...ec.dll
windows10-1703-x64
3$PLUGINSDI...7z.dll
windows10-1703-x64
3$R0/Uninst...nt.exe
windows10-1703-x64
7Analysis
-
max time kernel
114s -
max time network
142s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
30/06/2024, 19:59
Static task
static1
Behavioral task
behavioral1
Sample
DiscordBotClient-win-x64.exe
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
resources/app/VencordExtension/dist/Vencord.js
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
resources/app/VencordExtension/third-party/rnnoise/rnnoise/workletProcessor.js
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/assert.js
Resource
win10-20240611-en
Behavioral task
behavioral9
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/base64.js
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/binary-format-contract.js
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/binary-reader.js
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/binary-writer.js
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/enum-object.js
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/goog-varint.js
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/index.js
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/json-format-contract.js
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/json-typings.js
Resource
win10-20240611-en
Behavioral task
behavioral18
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/lower-camel-case.js
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/message-type-contract.js
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/message-type.js
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/oneof.js
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/pb-long.js
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/protobufjs-utf8.js
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-binary-reader.js
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-binary-writer.js
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-contains-message-type.js
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-create.js
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-equals.js
Resource
win10-20240611-en
Behavioral task
behavioral29
Sample
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-info.js
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
$R0/Uninstall DiscordBotClient.exe
Resource
win10-20240404-en
General
-
Target
resources/app/node_modules/@protobuf-ts/runtime/build/commonjs/reflection-create.js
-
Size
1KB
-
MD5
3784f44cd922e579f1ac3e289bac1717
-
SHA1
f26532e336fa37e9bddbac21f52c29657d30bbc5
-
SHA256
8bf9e620085dbfd5d51a4f747ab16e0c27c66ee366b75fed6cb46faec39c781c
-
SHA512
80a3127a7310fc8b2819d18576259884b38c287186de27081e99e508a05d6429a0d7a5404d89cbb73ecb0db254720a120f36391d105e51ae24ba05ae422ae749
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs