Analysis

  • max time kernel
    94s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-08-2024 17:48

General

  • Target

    DiscordMulty/lib/DSharpPlus.CommandsNext.xml

  • Size

    62KB

  • MD5

    4c50f3b79cfd2db77b17da4180c834f0

  • SHA1

    3d53f7ec434da0eebf73b2ffe77768948207255f

  • SHA256

    b11d46d5a06d21fee69e0f51ba6b5ae7fbf7478ae12ea5fb1cca9a7ebc6453f8

  • SHA512

    fc6842bc4671a1e87eb0fc87cbfb434b180c45273c9473a5dc88d8f20b61fba10f4cff53a940e046d94f3089eff5f3358a9a56c0ddf6871fce67887f61c215ca

  • SSDEEP

    768:/GpReTgtyIrM7TEYUfhUeOhQ+eOrDVZJstymHa+nzM8amujTD6j0jErghW+rBo/J:oGTD6oI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\DiscordMulty\lib\DSharpPlus.CommandsNext.xml"
    1⤵
      PID:4688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4688-0-0x00007FFB72A50000-0x00007FFB72A60000-memory.dmp

      Filesize

      64KB

    • memory/4688-1-0x00007FFBB2A6D000-0x00007FFBB2A6E000-memory.dmp

      Filesize

      4KB

    • memory/4688-2-0x00007FFBB29D0000-0x00007FFBB2BC5000-memory.dmp

      Filesize

      2.0MB

    • memory/4688-3-0x00007FFBB29D0000-0x00007FFBB2BC5000-memory.dmp

      Filesize

      2.0MB