General

  • Target

    QR.Discord.Token.Grabber.7z

  • Size

    67.7MB

  • MD5

    1d91d18ced4426eb935341d2142b098e

  • SHA1

    8ebbeeb816052d26adb1c68297f8a6b1af746634

  • SHA256

    724d3f4db11d82439b133765a86606cc48cf9a37c304829a95de960ef0a299c7

  • SHA512

    9cf8d2405fb168e700a4d032e7334c1c4ac01f508c5f6c5a8d4404a991d05add8760d4f30762806e0582b77044e980b767d7e2863078db793356db4c538ed65a

  • SSDEEP

    1572864:/uqjPnooFr3kBR+WRoL2SZobmeHmiWA/PFNSlgQoLEQsf:/uKnooUBRhoL9oS12PFNIocf

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QR.Discord.Token.Grabber.7z
    .7z
  • QR Discord Token Grabber/QR-dtg.py
    .py .js
  • QR Discord Token Grabber/README.md
  • QR Discord Token Grabber/[1] install_requirements.bat
  • QR Discord Token Grabber/[2] run.bat
  • QR Discord Token Grabber/browser.7z
    .7z
  • browser/84.0.4147.85/84.0.4147.85.manifest
  • browser/84.0.4147.85/Extensions/external_extensions.json
  • browser/84.0.4147.85/Locales/am.pak
  • browser/84.0.4147.85/Locales/ar.pak
  • browser/84.0.4147.85/Locales/bg.pak
  • browser/84.0.4147.85/Locales/bn.pak
  • browser/84.0.4147.85/Locales/ca.pak
  • browser/84.0.4147.85/Locales/cs.pak
  • browser/84.0.4147.85/Locales/da.pak
  • browser/84.0.4147.85/Locales/de.pak
  • browser/84.0.4147.85/Locales/el.pak
  • browser/84.0.4147.85/Locales/en-GB.pak
  • browser/84.0.4147.85/Locales/en-US.pak
  • browser/84.0.4147.85/Locales/es-419.pak
  • browser/84.0.4147.85/Locales/es.pak
  • browser/84.0.4147.85/Locales/et.pak
  • browser/84.0.4147.85/Locales/fa.pak
  • browser/84.0.4147.85/Locales/fi.pak
  • browser/84.0.4147.85/Locales/fil.pak
  • browser/84.0.4147.85/Locales/fr.pak
  • browser/84.0.4147.85/Locales/gu.pak
  • browser/84.0.4147.85/Locales/he.pak
  • browser/84.0.4147.85/Locales/hi.pak
  • browser/84.0.4147.85/Locales/hr.pak
  • browser/84.0.4147.85/Locales/hu.pak
  • browser/84.0.4147.85/Locales/id.pak
  • browser/84.0.4147.85/Locales/it.pak
  • browser/84.0.4147.85/Locales/ja.pak
  • browser/84.0.4147.85/Locales/kn.pak
  • browser/84.0.4147.85/Locales/ko.pak
  • browser/84.0.4147.85/Locales/lt.pak
  • browser/84.0.4147.85/Locales/lv.pak
  • browser/84.0.4147.85/Locales/ml.pak
  • browser/84.0.4147.85/Locales/mr.pak
  • browser/84.0.4147.85/Locales/ms.pak
  • browser/84.0.4147.85/Locales/nb.pak
  • browser/84.0.4147.85/Locales/nl.pak
  • browser/84.0.4147.85/Locales/pl.pak
  • browser/84.0.4147.85/Locales/pt-BR.pak
  • browser/84.0.4147.85/Locales/pt-PT.pak
  • browser/84.0.4147.85/Locales/ro.pak
  • browser/84.0.4147.85/Locales/ru.pak
  • browser/84.0.4147.85/Locales/sk.pak
  • browser/84.0.4147.85/Locales/sl.pak
  • browser/84.0.4147.85/Locales/sr.pak
  • browser/84.0.4147.85/Locales/sv.pak
  • browser/84.0.4147.85/Locales/sw.pak
  • browser/84.0.4147.85/Locales/ta.pak
  • browser/84.0.4147.85/Locales/te.pak
  • browser/84.0.4147.85/Locales/th.pak
  • browser/84.0.4147.85/Locales/tr.pak
  • browser/84.0.4147.85/Locales/uk.pak
  • browser/84.0.4147.85/Locales/vi.pak
  • browser/84.0.4147.85/Locales/zh-CN.pak
  • browser/84.0.4147.85/Locales/zh-TW.pak
  • browser/84.0.4147.85/MEIPreload/manifest.json
  • browser/84.0.4147.85/MEIPreload/preloaded_data.pb
  • browser/84.0.4147.85/VisualElements/Logo.png
    .png
  • browser/84.0.4147.85/VisualElements/LogoBeta.png
    .png
  • browser/84.0.4147.85/VisualElements/LogoCanary.png
    .png
  • browser/84.0.4147.85/VisualElements/LogoDev.png
    .png
  • browser/84.0.4147.85/VisualElements/SmallLogo.png
    .png
  • browser/84.0.4147.85/VisualElements/SmallLogoBeta.png
    .png
  • browser/84.0.4147.85/VisualElements/SmallLogoCanary.png
    .png
  • browser/84.0.4147.85/VisualElements/SmallLogoDev.png
    .png
  • browser/84.0.4147.85/WidevineCdm/LICENSE
  • browser/84.0.4147.85/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll
    .dll windows:5 windows x64 arch:x64

    72eb92f44d96b3dcafd83c71405d194d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig
  • browser/84.0.4147.85/WidevineCdm/manifest.json
  • browser/84.0.4147.85/chrome.dll
    .dll windows:5 windows x64 arch:x64

    edfed4508505053bb9c68b5be80477bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/chrome.dll.sig
  • browser/84.0.4147.85/chrome.exe.sig
  • browser/84.0.4147.85/chrome_100_percent.pak
  • browser/84.0.4147.85/chrome_200_percent.pak
  • browser/84.0.4147.85/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    3b74d11283939bf0c0f514e79f43c0d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/chrome_pwa_launcher.exe
    .exe windows:5 windows x64 arch:x64

    8bea80cb63da9a627d37eb7f882f6534


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/default_apps/docs.crx
    .zip
  • icon_128.png
    .png
  • icon_16.png
    .png
  • main.html
    .html
  • main.js
  • manifest.json
  • browser/84.0.4147.85/default_apps/drive.crx
    .zip
  • 128.png
    .png
  • _locales/ar/messages.json
  • _locales/bg/messages.json
  • _locales/ca/messages.json
  • _locales/cs/messages.json
  • _locales/da/messages.json
  • _locales/de/messages.json
  • _locales/el/messages.json
  • _locales/en_GB/messages.json
  • _locales/en_US/messages.json
  • _locales/es/messages.json
  • _locales/es_419/messages.json
  • _locales/et/messages.json
  • _locales/eu/messages.json
  • _locales/fi/messages.json
  • _locales/fil/messages.json
  • _locales/fr/messages.json
  • _locales/he/messages.json
  • _locales/hi/messages.json
  • _locales/hr/messages.json
  • _locales/hu/messages.json
  • _locales/id/messages.json
  • _locales/it/messages.json
  • _locales/ja/messages.json
  • _locales/ko/messages.json
  • _locales/lt/messages.json
  • _locales/lv/messages.json
  • _locales/ms/messages.json
  • _locales/nl/messages.json
  • _locales/no/messages.json
  • _locales/pl/messages.json
  • _locales/pt_BR/messages.json
  • _locales/pt_PT/messages.json
  • _locales/ro/messages.json
  • _locales/ru/messages.json
  • _locales/sk/messages.json
  • _locales/sl/messages.json
  • _locales/sr/messages.json
  • _locales/sv/messages.json
  • _locales/th/messages.json
  • _locales/tr/messages.json
  • _locales/uk/messages.json
  • _locales/vi/messages.json
  • _locales/zh_CN/messages.json
  • _locales/zh_TW/messages.json
  • manifest.json
  • browser/84.0.4147.85/default_apps/external_extensions.json
  • browser/84.0.4147.85/default_apps/gmail.crx
    .zip
  • 128.png
    .png
  • _locales/ar/messages.json
  • _locales/bg/messages.json
  • _locales/ca/messages.json
  • _locales/cs/messages.json
  • _locales/da/messages.json
  • _locales/de/messages.json
  • _locales/el/messages.json
  • _locales/en/messages.json
  • _locales/es/messages.json
  • _locales/fi/messages.json
  • _locales/fil/messages.json
  • _locales/fr/messages.json
  • _locales/hi/messages.json
  • _locales/hr/messages.json
  • _locales/hu/messages.json
  • _locales/id/messages.json
  • _locales/it/messages.json
  • _locales/ja/messages.json
  • _locales/ko/messages.json
  • _locales/lt/messages.json
  • _locales/lv/messages.json
  • _locales/nl/messages.json
  • _locales/no/messages.json
  • _locales/pl/messages.json
  • _locales/pt_BR/messages.json
  • _locales/pt_PT/messages.json
  • _locales/ro/messages.json
  • _locales/ru/messages.json
  • _locales/se/messages.json
  • _locales/sk/messages.json
  • _locales/sl/messages.json
  • _locales/sr/messages.json
  • _locales/th/messages.json
  • _locales/tr/messages.json
  • _locales/uk/messages.json
  • _locales/vi/messages.json
  • _locales/zh_CN/messages.json
  • _locales/zh_TW/messages.json
  • manifest.json
  • browser/84.0.4147.85/default_apps/youtube.crx
    .zip
  • 128.png
    .png
  • _locales/ar/messages.json
  • _locales/bg/messages.json
  • _locales/ca/messages.json
  • _locales/cs/messages.json
  • _locales/da/messages.json
  • _locales/de/messages.json
  • _locales/el/messages.json
  • _locales/en/messages.json
  • _locales/es/messages.json
  • _locales/fi/messages.json
  • _locales/fil/messages.json
  • _locales/fr/messages.json
  • _locales/he/messages.json
  • _locales/hi/messages.json
  • _locales/hr/messages.json
  • _locales/hu/messages.json
  • _locales/id/messages.json
  • _locales/it/messages.json
  • _locales/ja/messages.json
  • _locales/ko/messages.json
  • _locales/lt/messages.json
  • _locales/lv/messages.json
  • _locales/nl/messages.json
  • _locales/no/messages.json
  • _locales/pl/messages.json
  • _locales/pt_BR/messages.json
  • _locales/pt_PT/messages.json
  • _locales/ro/messages.json
  • _locales/ru/messages.json
  • _locales/sk/messages.json
  • _locales/sl/messages.json
  • _locales/sr/messages.json
  • _locales/sv/messages.json
  • _locales/th/messages.json
  • _locales/tr/messages.json
  • _locales/uk/messages.json
  • _locales/vi/messages.json
  • _locales/zh_CN/messages.json
  • _locales/zh_TW/messages.json
  • manifest.json
  • browser/84.0.4147.85/elevation_service.exe
    .exe windows:5 windows x64 arch:x64

    05e7c2e1b3b8cfd9a4a7808baf6ff89e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/eventlog_provider.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • browser/84.0.4147.85/icudtl.dat
  • browser/84.0.4147.85/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    473add2829e325fddbfbed09790ab4d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    0ad9888aed83c203e5869b021ff3c09e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/nacl_irt_x86_64.nexe
    .elf linux x64
  • browser/84.0.4147.85/notification_helper.exe
    .exe windows:5 windows x64 arch:x64

    bb6a0acc0808934960b53ad7574cbc6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/resources.pak
  • browser/84.0.4147.85/swiftshader/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    a9e49d20df10f15c9224d2a4846c15d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/swiftshader/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    957c979fb8f5a24d19c4ab4a923f6738


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/84.0.4147.85/v8_context_snapshot.bin
  • browser/SetupMetrics/20200710022159.pma
  • browser/chrome.VisualElementsManifest.xml
  • browser/chrome.exe
    .exe windows:5 windows x64 arch:x64

    e06bfefad3923e011bc295438a5c4832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/chrome_proxy.exe
    .exe windows:5 windows x64 arch:x64

    47abec7b734d5935fb44815b63b4e249


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • browser/chromedriver.exe
    .exe windows:5 windows x86 arch:x86

    5a3acb915ab46f117be1775929e00b27


    Headers

    Imports

    Exports

    Sections

  • browser/master_preferences
  • QR Discord Token Grabber/resources/final_qr.png
    .png
    • https://discord.com/ra/yrAc8C72YoUCCFiD55gXKHTFBPvXHEYwzfpw3nZJQYQ

  • QR Discord Token Grabber/resources/overlay.png
    .png
  • QR Discord Token Grabber/resources/qr_code.png
    .png
    • https://discord.com/ra/yrAc8C72YoUCCFiD55gXKHTFBPvXHEYwzfpw3nZJQYQ

  • QR Discord Token Grabber/resources/template.png
    .png