Overview
overview
10Static
static
10source_prepared.exe
windows7-x64
7source_prepared.exe
windows10-2004-x64
9discord_to...er.pyc
windows7-x64
3discord_to...er.pyc
windows10-2004-x64
3get_cookies.pyc
windows7-x64
3get_cookies.pyc
windows10-2004-x64
3misc.pyc
windows7-x64
3misc.pyc
windows10-2004-x64
3passwords_grabber.pyc
windows7-x64
3passwords_grabber.pyc
windows10-2004-x64
3source_prepared.pyc
windows7-x64
3source_prepared.pyc
windows10-2004-x64
3General
- Target source_prepared.exe
- Size 80.6MB
- Sample240719-d91hasvbjc
- SHA256 bf6bc8ca3a99840471241fc42e8a495313b9cfa0564523c2639aede47afe07e6
- MD5 760e7694f6a8bdc904dacd1dd35ce689
- SHA1 2e47d75340b9f4292332295f0ba6a0d638bda1f3
- SHA512 97c57e98661e30962eaf9e553c5dd12930d1fcf8e8a9057db1cbf55392334b980c5e2ec272dfffa6c7fea2c0a4d08d244c1b53bd7d6ff302bb67cc1b2f350109
- SSDEEP 1572864:lvxZQgl4Sk8IpG7V+VPhqYdfCE7jlgJiYgj+h58sMwcWv9MBzcJXP:lvxZx+SkB05awcfHeL5wy9MW
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
source_prepared.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
source_prepared.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
discord_token_grabber.pyc
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
discord_token_grabber.pyc
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
get_cookies.pyc
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
get_cookies.pyc
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
misc.pyc
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
misc.pyc
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
passwords_grabber.pyc
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
passwords_grabber.pyc
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
source_prepared.pyc
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
source_prepared.pyc
Resource
win10v2004-20240709-en
Malware Config
Targets
-
- Target source_prepared.exe
- Size 80.6MB
- SHA256 bf6bc8ca3a99840471241fc42e8a495313b9cfa0564523c2639aede47afe07e6
- MD5 760e7694f6a8bdc904dacd1dd35ce689
- SHA1 2e47d75340b9f4292332295f0ba6a0d638bda1f3
- SHA512 97c57e98661e30962eaf9e553c5dd12930d1fcf8e8a9057db1cbf55392334b980c5e2ec272dfffa6c7fea2c0a4d08d244c1b53bd7d6ff302bb67cc1b2f350109
- SSDEEP 1572864:lvxZQgl4Sk8IpG7V+VPhqYdfCE7jlgJiYgj+h58sMwcWv9MBzcJXP:lvxZx+SkB05awcfHeL5wy9MW
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Enumerates VirtualBox DLL files
-
Loads dropped DLL
-
- Target discord_token_grabber.pyc
- Size 17KB
- SHA256 8ae6baddc552f9a47c488760a3d3b04f217f7c999dbffc1a548bb09532e6bf77
- MD5 e523026b612006e580e96bd9e2a8882c
- SHA1 03b9938701f7eff11a0c3632ed805e8188598c88
- SHA512 a0f15f5edecbab4894aa3b85092fc2bde34b76f6048b198ce387d59a56d6c74969201cc43d19cd27a9ff0a6ab72268884a90ef206f0be34a5707a7f6ea24a853
- SSDEEP 384:cGllyAavwS9F0RW807PPQviowoYbCj+Mo8WWIc02a8:cIlytvX9iRW8inQ6owoYOyM0d2a8
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target get_cookies.pyc
- Size 10KB
- SHA256 85a7c34afad2c270ca690a5b4c30cc8bf16967e623fc77f4de4497901030a93b
- MD5 b38f506528b3d6d5dbd851426c347b95
- SHA1 e91bf4ef42128267934e21be0176e552480f5977
- SHA512 ab110dc92eba564fd0ec6c6a75e779f588518dc1aa461f072ab02b96bc11fbe25e09faa6a556dc6a127c3e8826382697b72037a0cefbdaf32fd70a723e746295
- SSDEEP 192:TzOCIeinQfUF9LdwOEVOFc1mNe47+o+zEzzzzz1zz+HoowAE:TzOUiQccEe4KoOIAE
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target misc.pyc
- Size 5KB
- SHA256 b522284f1a7e518c269c0414160407ec7834a4397f85ef389433b49367b5df9c
- MD5 31aa260c6cdeaa9d942cd0dcfcadd16a
- SHA1 a6818f3acf5c2ab9d65b41a81cb92b36b85cc932
- SHA512 0dd277ef948315a3554bd8c5110e27afa9b2eac88defc1211771c050cdd27b3668484dec35ec5c5010bff00b62c2cebd9e7286c0b114ad28437719b42bd0fc2c
- SSDEEP 96:DSajAihmJG4n3B4SmSSSSlSSSShDwegPbbVxlj0nIAEDS5ejmw01k9Bddpq:eYAfn3ySmSSSSlSSSSeeOPVxx0nIAZeQ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target passwords_grabber.pyc
- Size 8KB
- SHA256 1fd284f1e27263bd2a16050c6989933a382c7d196f4c9f247187cc3b3f6ba3ac
- MD5 704dced7f7530b19a34a5f7a71c26b10
- SHA1 608d9647488cfa2b5f84a891028168a973bfcfa9
- SHA512 e4a6710abef2c45d631745c91d8135873be06e5b240a61362e341d05ecc1dedf885487a554b648c328a3c5cc17fcf74e6d066b2e3f51379358ba28c2a0f2f39f
- SSDEEP 192:+CE34EAL/GFf/PomdPO23NsDmqFUhkxNivLI9dRvL:Y4EAL/AfRBO8NsxuOxNn
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target source_prepared.pyc
- Size 180KB
- SHA256 805c68ca3e4ce4a346e494d089fd5239bd044650b81578aaeeb8539a94230994
- MD5 33845751d7e08e5f50725830a91c42f3
- SHA1 66bece4ca45da224274eaa68524a9d610a1a5518
- SHA512 d59d2a9f700179d5970758395f1387e942a3e3050de27dc02c28d4b4433280993100937b8d1d3a1f0d325256bb955edbb5d1a10e94db05dd6147abb7782eb5b8
- SSDEEP 3072:Zr2LaLPA9Flt3opPEtelZN+thZa6CmgQDzWCknW:ZKWL6t3op8cN+rZa6CmgQDCCr
- MD5 SHA1 SHA512 SSDEEP
Score3/10