Analysis
-
max time kernel
313s -
max time network
1612s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
-
submitted
07-07-2024 14:42
General
-
Target
Discord-R4T.exe
-
Size
14.1MB
-
MD5
79c420f7b261b20c24a2efca6d59b5eb
-
SHA1
da6407e7e808fadc0f568b34dce571cdd8b66792
-
SHA256
dc4ee6889fa196e9e80f59f9a07ff69aa7dd19d6e0fadac8a7556b73431c532f
-
SHA512
636ac13f03f20dccd4bc5c361deac00d7216fb93e8668656e62e6a964c192a9a52ec7b67f031c30d54b7ab8dc779441339ebbf20ac00db79450226f252b73ed1
-
SSDEEP
196608:ykbHih8FxjJWcRHvUWvoo0sKYu/PaQshxYPuXCzQbRPX3MXGntftwtrdR3TN20Ls:vHLF7RHdTQcxgu6Qb6XGhSlv3p2eVLi
Malware Config
Signatures
-
Loads dropped DLL 20 IoCs
-
UPX packed file 57 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Discord-R4T.exe"C:\Users\Admin\AppData\Local\Temp\Discord-R4T.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Discord-R4T.exe"C:\Users\Admin\AppData\Local\Temp\Discord-R4T.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD511d9ac94e8cb17bd23dea89f8e757f18
SHA1d4fb80a512486821ad320c4fd67abcae63005158
SHA256e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
SHA512aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778
-
Filesize
36KB
MD57667b0883de4667ec87c3b75bed84d84
SHA1e6f6df83e813ed8252614a46a5892c4856df1f58
SHA25604e7ccbdcad7cbaf0ed28692fb08eab832c38aad9071749037ee7a58f45e9d7d
SHA512968cbaafe416a9e398c5bfd8c5825fa813462ae207d17072c035f916742517edc42349a72ab6795199d34ccece259d5f2f63587cfaeb0026c0667632b05c5c74
-
Filesize
43KB
MD566aab0180e201570c7b19e9ac8bab637
SHA1972a0461400f627cfe1384147d5e91603507aa6b
SHA25657069326fe1f71776eec74652099edf593b88deb296f6a18ef7785422eca0233
SHA5128a6bd010b072f978b54c459a5e92a37c5c67d5c5384c9b40d326d94d2dc2f2b712a154596b4626e35638073263d56ad8eee5ac96a8c27437c8db91299b2cf841
-
Filesize
53KB
MD5a9fcf5f243641b3d017ddfd09e951ad5
SHA1b2aae3232139fc05f69b37a6cd60d5d63707ee22
SHA256ac95c1ab7815fc4487423a65edfb22517f2c816aa370b19ea49bf42518785d35
SHA5127899bc09f3e4fca09c31b9cb5fa01370b344011942230b5e37eee638c22ea1d849fc121405f9c7db80a7f3362e4d3366d4ed44115d63e8e06f4c2d2c8305f22d
-
Filesize
81KB
MD50bdad00a4cb49cff6ff5a4365c61ea2c
SHA1773391b414981a419d51449427b7e038a8fd158b
SHA25635a50df7e54cf711b0d63e50227aa2cd381e6a79a99711639a00b69eba8a2872
SHA512e3c2d1bc5b37a5b96651f143345aa7993b7d2deed316bd82071e5f36ae4bc670e78c281eff18531383edbecd34218d8134c44756a70f00cc1cbac22c8318d67f
-
Filesize
27KB
MD59a8ca1a7f58222cba17d38d63e76ce5a
SHA12df4e21621f1c32bc5ff809bc3221d33e1eb84a3
SHA256b6d93d9b9164eafdf455c9b5d7cbd022d8eb720c8e65e640beb5e5e6ce33f5fb
SHA512dcd3349f7a2c688e0d8f07826f1bfac5bd79d74e17ea9846c5adcd0e62d52e17c1be7e9449772488af863217e1899a3eebf2fd0c28444bc342ad123ef942ffb0
-
Filesize
21KB
MD513df498c8ad19af58ca1fb151c813804
SHA12edf5b68c664b454ba7dd45dfa81ed93ad958910
SHA256aa5ea973c04cd11d3a2f3b6c5df6aba7146fa613b4538e0d3e4896bf2d274a26
SHA5124d280b5acffeec90dd1431482d8dd50c9561a4b3b2669fe627367f5cbcc3b0d7190eba37708a96d641965671c0f2cdee99e589e584ff842abd11a4d5960d58d6
-
Filesize
38KB
MD578545246ec054c39eff62a11f2df3afd
SHA1c15515278ea555c22fd5f19345a5c174ed725e2b
SHA256bdec38491e7c2c3adcffa4532e45be419512f9848db4f6c35fa1557b91914ac8
SHA512c7bd853237610f382a8132189958ec0138b427a65bed0569f849137ad664676abb1bd19e17a2841dd0d805698b10a3eea866333a4c1bd491c17ed75f29f8f0a9
-
Filesize
57KB
MD52b6c438daab1b01fd9c90411fea4568e
SHA1953b9137ab6ac25611e0f6d00e324eaa9e078c0e
SHA256a54d588131c30f677e216aa7fbfa3fdfdacf5fe3e9bdc21efd921c26a0c4e4d6
SHA512efb974cb3084fd11c6c52119e60eca056f50b0ac5c83a83071108a96b47924ee97fdc7843f7f55baee294fc3db8b6fe3fc216e73d98cafbf63e04e90dbe86e55
-
Filesize
1.0MB
MD532d90ef8a61a1fcc8219fa78499c9ac1
SHA1b6ac0dbadd0f0b66211e61c6e6ce747b4388014f
SHA256b5a9fd85ae31c8536811fc27f137c3c5bcd43391b3561bb704e4bc447629113e
SHA512e35e05fdcfc8dd7a6c10f59998eae3381067a81b0872a23eb335f0a928f0f84e0ac9187df948a88ce5b63ddcf31396a1a13a618ba25861119c5652156b597c13
-
Filesize
1.1MB
MD54785b91335b5c71f996ba82e309e0675
SHA12ee61a1437f445a8a62a66577537052185258c4e
SHA25697ead1da1ce7408d6688654b51db249f4c796f74afb8a69f6361ac2a32de7447
SHA512374ba8e8fcc3d972014683bc27bf1198ce8966778da558eb7560cdf15c1d7723b6fdc83564d19b4953f88b5fe7705b67ec5ebb9b047e6c829d6eabf252ca821f
-
Filesize
23KB
MD528f70fc93ccac226ffa49710020b2968
SHA112143445a45039ee235d44f6f9f2f7b3aebee82e
SHA256ed6291be08f9bb7e69c6dabd5b17ca3c8b04102794f0426485cab12b273dbce0
SHA51249b6c81d27c2c9deef508a03ab4dbcf7ce904436f553971c048e6dfd70fa451d6a9e31a8d7c0be7ed82506b6987d122331c2921c06cb10c98845e507210fa8a9
-
Filesize
198KB
MD5bef1de4d3f2cd6c1f954c1c4408a3cfe
SHA1b83356270f1b466479ccaea3f0040aca9fbcb995
SHA256ad507157a15b1a685cce3b4cb14bd71c69e2c36e3eb4b23cc8e45b6d5472b151
SHA51222916451993993dea226ca7c345bed76014b0cf836b11014d15a65dfe93f64673f889231105dc2bcebd3f77f1f4d941d239e958ea227125f793dc46a9a9434e5
-
Filesize
81KB
MD5a62fb7208c7e9a6fbe3fa57de72c0e44
SHA123f0bf109df3ab6908cc2869707e0ff43bea85dd
SHA2565065d2233dce2f82f7341dc55d7f51fee87d55ca42ec4df28f39440a8bb66acb
SHA5121e51bcf69517ef10746846673321760cb770de64ddcc707bf6295ff4b3d8f7dd60d3d0cc29a81e63b313059b616989194f231d9d72e75b43bf1e0960b02d4ec5
-
Filesize
1.4MB
MD5ff6d06c64abd4727f2ec68fea68a10ad
SHA1b0f1310e74825063896c70918669d9294c4caa93
SHA2564ac1f03412a3e955e9d797e9dac84558fe6e3174d704b06defbc0843e72b87ed
SHA512901e1fc7b66bd31bc2038bca9e027ff1507803f59181b855aa99c36658875a6718421a476ef7a55b94b32fc6a3792ee6d5dfdcf5e2aa564f2f4d51409f22c3af
-
Filesize
193KB
MD5e8f0f8ab3bdbf6a848d7c464750292fe
SHA142bf3f4a587a2300e52492694046c4279395e84a
SHA256c132cd7d2a15ad39167663ac29306adf513688c368fab4a5011cf135b6e8b4ad
SHA512a5d27cb2940ee8987bd4ff8d78227b2b9003e1821914686a68f7f034182f3c6a1a57508d7ed6ec3b9b0a6035675bd0c6711a322a29c1e2fdcc859ea6263d01bc
-
Filesize
62KB
MD59e3d1376a7391b0959370a2a0128f06d
SHA1f04333751da9278bc7f906dd5070a79ae1339ee1
SHA2561b2f395808af4726f0a5183484606d9533eb8c1b86a21023be25086b5c45fba4
SHA51256877d88d8f8eb55025f0c6b3b5783d73fc26ec455826b90232ae81735b83bce3f25fd6f288617d6b87b686ec4eb3ea460a1d7e09772e3941a8b79c20cc437b7
-
Filesize
21KB
MD53e58779596252e388ff9f0159171b677
SHA120a49f48d9b516806d3f52c6e444eccb6b91c130
SHA25640b8f6aa696ad8e354e71789fad2af3cafceaf9289cb77757dbcf3a4f7b20386
SHA5126930729a8660ce063ea369cd53200f133eae2bc7f1bb10b116b2b132cb93076a8546cb488edcbe18eac265353420463ea61274f1d4e7f4dfd2ffa4d86628323c
-
Filesize
48KB
MD503d953e42fbf48c524aa21c50a7f5903
SHA1cb70a27dc5d332ab3fc21d641d048892e8f2d6fd
SHA25633dd1ca9fc942911aa741557416437d0a73a30c5e047c2bc158864ef6c0d4215
SHA5120ac39b64981ef64676c3ec2d2fa965991add4349e93882d56a8742b36296e393635a041b7b11a9a4d5221759a1dd58acf7db46a833f99d91847aee946617c9af
-
Filesize
31KB
MD5c2467f4820420a09a39b712bd79a11a8
SHA1b5e78ab26e7e4992e6460fa6bd3b9cfbcef67d84
SHA256b0f3ce1715c1b57e0d4699f959c75aa4367f1155ed2c06cc1d94e08fbf3fcdc9
SHA5128254a9d478610a5c5f1fa37052e5dc4b8f897c6c9de87d3a305d8e514693d6dd8c039b3ca7f38d4b71e5d50cb42bd2a2970b81308aa853abdbc96d97084bb2e7
-
Filesize
212KB
-
Filesize
172KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
64KB
-
Filesize
144KB
-
Filesize
4.4MB
-
Filesize
752KB
-
Filesize
100KB
-
Filesize
184KB
-
Filesize
60KB
-
Filesize
144KB
-
Filesize
100KB
-
Filesize
728KB
-
Filesize
3.5MB
-
Filesize
176KB
-
Filesize
3.5MB
-
Filesize
52KB
-
Filesize
80KB
-
Filesize
176KB
-
Filesize
212KB
-
Filesize
4.4MB
-
Filesize
100KB
-
Filesize
100KB
-
Filesize
728KB
-
Filesize
4.4MB
-
Filesize
3.5MB
-
Filesize
80KB
-
Filesize
64KB
-
Filesize
172KB
-
Filesize
752KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
212KB
-
Filesize
176KB
-
Filesize
100KB
-
Filesize
60KB
-
Filesize
144KB
-
Filesize
184KB