Overview
overview
10Static
static
3DiscordMul...le.dll
windows7-x64
1DiscordMul...le.dll
windows10-2004-x64
1DiscordMul...er.exe
windows7-x64
10DiscordMul...er.exe
windows10-2004-x64
10DiscordMul...hy.dll
windows7-x64
1DiscordMul...hy.dll
windows10-2004-x64
1DiscordMul...xt.dll
windows7-x64
1DiscordMul...xt.dll
windows10-2004-x64
1DiscordMul...ty.dll
windows7-x64
1DiscordMul...ty.dll
windows10-2004-x64
DiscordMul...us.dll
windows7-x64
1DiscordMul...us.dll
windows10-2004-x64
1DiscordMul...EQ.dll
windows7-x64
1DiscordMul...EQ.dll
windows10-2004-x64
1DiscordMul...le.dll
windows7-x64
1DiscordMul...le.dll
windows10-2004-x64
1DiscordMul...et.dll
windows7-x64
1DiscordMul...et.dll
windows10-2004-x64
1DiscordMul...es.dll
windows7-x64
1DiscordMul...es.dll
windows10-2004-x64
1DiscordMul...ns.dll
windows7-x64
1DiscordMul...ns.dll
windows10-2004-x64
1DiscordMul...on.dll
windows7-x64
1DiscordMul...on.dll
windows10-2004-x64
1DiscordMul...on.dll
windows7-x64
1DiscordMul...on.dll
windows10-2004-x64
1DiscordMul...ly.dll
windows7-x64
1DiscordMul...ly.dll
windows10-2004-x64
1DiscordMul...le.dll
windows7-x64
1DiscordMul...le.dll
windows10-2004-x64
1DiscordMul...nc.dll
windows7-x64
1DiscordMul...nc.dll
windows10-2004-x64
1Analysis
-
max time kernel
114s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-08-2024 17:51
Static task
static1
Behavioral task
behavioral1
Sample
DiscordMulty/Colorful.Console.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
DiscordMulty/Colorful.Console.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DiscordMulty/DRouter.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
DiscordMulty/DRouter.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DiscordMulty/lib/Anarchy.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
DiscordMulty/lib/Anarchy.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
DiscordMulty/lib/DSharpPlus.CommandsNext.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
DiscordMulty/lib/DSharpPlus.CommandsNext.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
DiscordMulty/lib/DSharpPlus.Interactivity.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
DiscordMulty/lib/DSharpPlus.Interactivity.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
DiscordMulty/lib/DSharpPlus.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
DiscordMulty/lib/DSharpPlus.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
DiscordMulty/lib/Discord.REQ.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
DiscordMulty/lib/Discord.REQ.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
DiscordMulty/lib/Figgle.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
DiscordMulty/lib/Figgle.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
DiscordMulty/lib/Leaf.xNet.dll
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
DiscordMulty/lib/Leaf.xNet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.dll
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
DiscordMulty/lib/Newtonsoft.Json.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
DiscordMulty/lib/Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
DiscordMulty/lib/Polly.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
DiscordMulty/lib/Polly.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
DiscordMulty/lib/System.Collections.Immutable.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
DiscordMulty/lib/System.Collections.Immutable.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
DiscordMulty/lib/System.Interactive.Async.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
DiscordMulty/lib/System.Interactive.Async.dll
Resource
win10v2004-20240802-en
General
-
Target
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.dll
-
Size
43KB
-
MD5
7a9b8793552ce40160a6d273b22f807e
-
SHA1
1c302ea0a44f517b97af19252140ec710d5d3bfb
-
SHA256
200aba7859ecfb045d43a8e2bf9abce4c929507364b7714388f59affe708fb06
-
SHA512
7d5ea03d5815a6f5705875fe6c2d2179c6ee5468d6b19423f04c8982e64226e656bfd7ccaf7a5756c7046d2e6d2c3504190ba642e02bc197d48dad9320fd6bd5
-
SSDEEP
768:gQnUmCQ0dQ8d2TN7uxgoXvM4s8w0woFY9SP8:MmC3dQ88Tk+8vM2fBO9I8
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\DiscordMulty\lib\Microsoft.Extensions.DependencyInjection.Abstractions.dll,#11⤵PID:3484
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4296,i,8548254608087149642,10333768245962368401,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:81⤵PID:2676