Overview
overview
10Static
static
10XeloraBootsrapper.exe
windows7-x64
7XeloraBootsrapper.exe
windows10-2004-x64
9discord_to...er.pyc
windows7-x64
3discord_to...er.pyc
windows10-2004-x64
3get_cookies.pyc
windows7-x64
3get_cookies.pyc
windows10-2004-x64
3misc.pyc
windows7-x64
3misc.pyc
windows10-2004-x64
3passwords_grabber.pyc
windows7-x64
3passwords_grabber.pyc
windows10-2004-x64
3source_prepared.pyc
windows7-x64
3source_prepared.pyc
windows10-2004-x64
3Analysis
- max time kernel
7s - max time network
8s - platform
windows7_x64 - resource
win7-20240611-en - resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system - submitted
02/07/2024, 16:50
Behavioral task
behavioral1
Sample
XeloraBootsrapper.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
XeloraBootsrapper.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
discord_token_grabber.pyc
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
discord_token_grabber.pyc
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
get_cookies.pyc
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
get_cookies.pyc
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
misc.pyc
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
misc.pyc
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
passwords_grabber.pyc
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
passwords_grabber.pyc
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
source_prepared.pyc
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
source_prepared.pyc
Resource
win10v2004-20240611-en
General
- Target XeloraBootsrapper.exe
- Size 63.9MB
- Sample240702-vb8vfswdmn
- SHA256 9d569f5ac42ebde189703f5a1598b90edb17ff0b38bd6d7eadd0d48043f63407
- MD5 495998a4af43fbb86de788221c3e4f70
- SHA1 cbe854305068674613f980622e8c8d1a5f48398f
- SHA512 4008a12c0e0fcd9b785c44a4100352206c0f95ed9ac538a83c6d01c9f3670544695224f2f5d023f7ada097a2d020c81287fec5b9e765c45df7c16a37f2934cc3
- SSDEEP 1572864:xvxZQglX2i+TnE7Ulg8iYgj+h58sMw5IlWI9RghcJX0:xvxZxRz+Tfe25FSB9RR0
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/files/0x000400000001cfb1-1259.dat upx behavioral1/files/0x000400000001cfb1-1260.dat upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30082\python311.dll
- Size 1.6MB
- SHA256 3512c3a7ad74af034f51eba397c0e4716f592861ea3030745e8fd4dc8f9bca49
- MD5 8ea69ca2292c3af9cdb46dded91bc837
- SHA1 72de7df68b2c336720d1528c34f21ff00ed7a2ce
- SHA512 fb317bab11c922dc183d834b770e37e382b9cf3ab1ea95e9bca8d73ed1e23cc9ef2b6aea4a20d4637eba34276c81a6eee54b00cb146f825ef554d81387ae4ddc
- SSDEEP 24576:XJY99sOZi/8N8C1CSIJyR4ZRE1Rqq/uQivcHe2Bg5Cmek5CP7uP6zohpLGLZFkh2:QjZiEN8p6ivZUHe2BgcpP7uaor6
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\_MEI30082\python311.dll
- Size 45KB
- SHA256 00240d53958ca7230a68a36d4237767aaa40132c0f4a45a53817b7fa3ab59d8d
- MD5 4791d5cb7ad74a142cdcd9607472241c
- SHA1 0162487e7a60ac2dacbdd768e8cc09e85f8de84a
- SHA512 ff95c0f5b2d6342806ce0e07dccf9e96ff8b2f99b08a34e174a091b4d83267f4a1c6fe8183f6392f605d721b81463edb7f4575ad33457c614523baeaac6e0cfc
- SSDEEP 768:Mh1Rukg/EW4FbDuUNDfFQYjed5bPB8jQbsolL9adRKl+5E1HmoeSscjdMT4UHf:SruSFbP9FQG6N82saQd8l+5iHmiM3Hf
- MD5 SHA1 SHA512 SSDEEP