249bdaa4332b3e1a3a2148d4fd587a42bd48615af556d1c72da51c55bb2ca697

Resubmissions

03/08/2024, 15:17

240803-spc9laxcpn6

03/08/2024, 14:57

240803-sbjt8awhmk7

03/08/2024, 11:48

240803-nyplrssbmr6

Sharing

Copy URL Twitter E-mail

General

Target
BetterDiscord-Windows.exe
Size 75.1MB
Sample240803-nyplrssbmr
SHA256 249bdaa4332b3e1a3a2148d4fd587a42bd48615af556d1c72da51c55bb2ca697
MD5 43327119366e52928b9aed0c1e734389
SHA1 3777d8387fba8528b6e433a8e763df5dcd542a48
SHA512 bda75994e6dcf5bc9e5b45d025894d62d0138a9d39c47255cd3b6b6e32f60de973da54bf85de57e8f0ca8a253bf414697c4b06e887d45dded90485ce6832e7f4
SSDEEP 1572864:DMKQ/QO4cQ0dPUnqZUPsziv5IANK+4ZYPDHdH/I1z/dHazC:DzXr50lUnqEneWlWYj21zaC
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  BetterDiscord-Windows.exe
- Size 75.1MB
- SHA256 249bdaa4332b3e1a3a2148d4fd587a42bd48615af556d1c72da51c55bb2ca697
- MD5 43327119366e52928b9aed0c1e734389
- SHA1 3777d8387fba8528b6e433a8e763df5dcd542a48
- SHA512 bda75994e6dcf5bc9e5b45d025894d62d0138a9d39c47255cd3b6b6e32f60de973da54bf85de57e8f0ca8a253bf414697c4b06e887d45dded90485ce6832e7f4
- SSDEEP 1572864:DMKQ/QO4cQ0dPUnqZUPsziv5IANK+4ZYPDHdH/I1z/dHazC:DzXr50lUnqEneWlWYj21zaC
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

discovery
- Legitimate hosting services abused for malware hosting/C2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgImage.dll
- Size 7KB
- SHA256 e27efa5dfde875bd6b826fafb4c7698db6b6e30e68715a1c03eb018e3170fc04
- MD5 487368e6fce9ab9c5ea053af0990c5ef
- SHA1 b538e37c87d4b9a7645dcbbd9e93025a31849702
- SHA512 bb3ed4c0d17a11365b72653112b48c8c63ab10590dda3dfd90aa453f0d64203000e4571c73998063352240e1671d14da5ee394439899aaa31054fa2e9b722ea7
- SSDEEP 96:8efk1LFJaO1/radJEaYtv1Zs4lkL8y3A2EN8Cmy3uT24j7J3kWyy/:tcTJa2roqJyA2EN8diuTHje
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  BetterDiscord.exe
- Size 112.3MB
- SHA256 43894debcd60fed8d64c1a724e60eb860a9d5453b3fc0529ecf9efdbc10a8128
- MD5 673c5e8265f3f9c40e2fc8a4b56744e4
- SHA1 5d0b271b850f0cd8e01229b1a72a2c1215bc7956
- SHA512 920c25220fe7d0b6b0079f9856d3931c3dcf93c8c6cf74f1ca1b3946a327093b24c03eb726b4344445b4d386847fc67e9dcf8550c20617a79df75b5d9c3e7483
- SSDEEP 1572864:AzeRomoaC09nEiziYtpg0Ymr7owq3Ddn35FZevY4v034WZZB0HDh996O/fJaCJpw:geRomF3o3V/ZevY/CHHd+Iq
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  LICENSES.chromium.html
- Size 5.1MB
- SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
- MD5 6b84319ee8a0a0af690273d3d2dcbaf4
- SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
- SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
- SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  d3dcompiler_47.dll
- Size 3.5MB
- SHA256 2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df
- MD5 2f2e363c9a9baa0a9626db374cc4e8a4
- SHA1 17f405e81e5fce4c5a02ca049f7bd48b31674c8f
- SHA512 e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924
- SSDEEP 49152:sXMoHAsisjBFjJMLhHELxJm8ZU8W/GBj5Z535TMpinAizxkl/cD11bqCG7jHbOkD:srZOb8W/G5hnAizxz7NZy9AG
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13
- Target
  ffmpeg.dll
- Size 2.5MB
- SHA256 0d4ebdd32f016c6eb203aef4c70ad2f93fa68e5b9e92087a862b21f8133c7319
- MD5 d2cc6fc3a7b6c5bcca5fae428fe799e0
- SHA1 89cba6e9195cf95a7aa993d7aaadb331392b3bda
- SHA512 34f7e6c49ff2a230abc7c5aeeebc5ec628f07170c4638b3bfc5897a645fa5f167c54230373a39021548e0aceba50c35ef730e4ecb454bb4d882df2d699c86736
- SSDEEP 49152:8LmyB/kMqMdqev+YEdOzvKi5rWniVA8IOF:UmI/kMqMdqe9zvKiOL8T
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  libEGL.dll
- Size 346KB
- SHA256 2166f8830bfbf3d574d7654bd927fe6e05fb74fb05d8e57af59c93090f6bc2a6
- MD5 dccd99cb80c5022d4ed21c068d4e4ae5
- SHA1 4fcdc6be313d0e3baa5168a7556df992e3364da4
- SHA512 02f18a691d85545a0452631b1c1e218aa5853d71937f7ae1d4f3639142399017139c1d9cb81f769754303635ce689605a7fd65765a3d8b4873603ced57925faf
- SSDEEP 6144:DMsJQmSGv9SHEOCK6tNu2JztBwNWqERYRg2Z4uVPZIcwpJAc21Dq2bTm:DmERK6tNVwNWqEnFuVPicAwE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  libGLESv2.dll
- Size 6.6MB
- SHA256 3672e62c20b1d253ad642e155ae32ba5c1ca1f2cce37565c71a7d8aad21515dd
- MD5 d36a30ef5726be3e3b3ed3f886a781a8
- SHA1 0a47ed6013866aef030683e0398937013ce7fdf0
- SHA512 8ac4adc7879cc7b0661809394e118220a350c9b8063aadf44fcecd115411fcc040ea73cb1fb2896931c34ec04b6146e5b5f7cda531249698dceb09aa1f9b4078
- SSDEEP 98304:3QCYyoIganb7rvoRVNBlrErukVVraNqk6xjL5V9zEYT/lv3:3QCYyZDnyVfqrukTrBTxR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral18 behavioral19
- Target
  resources/app.asar
- Size 1.1MB
- SHA256 eaddb78f5f24d73c75e3f016457e79f0c1685d5add4ec5647efdcb3e5841b7b5
- MD5 f64750a616dcdafc38fa3fdaa966fbc5
- SHA1 358b77012f4a1a9c96f6370d4f7b96ab55e302fa
- SHA512 46221e0b9c11674847b9de39a23effa339ece2fb15ca6036e1bc4444f0dbe1ad6ded144ed2ae511525034210842614d295f001dab64b360c97fb9e2cf3f9e984
- SSDEEP 12288:yJT2cdLKo/l0xsrDIFpVpZ3uQqPjSFxfPfViQt1YCOx:0T2cdKrlt1js
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral20 behavioral21
- Target
  swiftshader/libEGL.dll
- Size 366KB
- SHA256 0d4015adb1b1a4996378e06c9341b19d00e3cab8d18c002197ea9311feaf5d11
- MD5 c51dc7e0ca92c9a45467a202aeceebf3
- SHA1 5f35ec0c4e9b7663d7467a6c5f10062479519758
- SHA512 8439f2a36f0a85dbfe12e786672278c6f6250be5029313efa285f851491357e134d6c9e03b339985eb255e80988e82d37540ffaef4f358c4428f6fc6aaec9ab0
- SSDEEP 6144:z0xXgHVFDxkm2nh/nyce87Xi4dlwhNEkqZCC9uZaWPJqSpdZgOBJ4+b2T:Ih/Ze87Xi4dCC1uZaeZGn
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  swiftshader/libGLESv2.dll
- Size 2.7MB
- SHA256 dac51738a42514c68ec31c962e608f6ce4a5a4244b787d2ba404a6a6065d8244
- MD5 5629b1c0102dcc1e4217276efdc60630
- SHA1 ffdd7bd4131c53b0ec5725ed8a8529b4be677232
- SHA512 8606a5e86172ab1f8cd65927b5139658e42ccf3fa870c27c2ce2a36cdfbffd3764f2efe83d4cc76c676c89d9fede70ca643950f370bbbd0b1dc8d2df005c46cd
- SSDEEP 49152:9dnrjtIvoFzKkAdACGPIuV95gE+pZRNA32yJ6uhH2elKnmeEkAz4RnEoJ2rdzNBu:9F3tfKNtja1MZdZ1X
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral24 behavioral25
- Target
  vk_swiftshader.dll
- Size 3.9MB
- SHA256 115ade04abfc0bc084c00716490cc9fb1de658516658bc5b95d39f341d05a204
- MD5 ef923cd8e56388b4e0746883a260a0cc
- SHA1 ca8ea23d0747cab1915acaedaf4a3bd2146095ae
- SHA512 bc1f20be1cf53c2193b3b4f25d212f5c6f1f6e58d3d2a82010d32a7ef790c6074d400e7cff711dc4a1d9713d027f1235cc97a2b58fb7dcff611e5db582d3b0c8
- SSDEEP 49152:YWzcL9x2ydlDTa7GmidqJfec1e6u9px5Uxb92ZpJyTlN9lp/5iY8E8oP7qG7rm79:YaK1GPm4gmZZrVSowgaB
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  vulkan-1.dll
- Size 616KB
- SHA256 96b5833d66faea81bea3da7e7c5735ecb43f3b1e713715304d20377cc1f67a27
- MD5 5cfcea352b182820083249567842e7ba
- SHA1 0998def9b65a187d02b77763343ac81d1eb245c8
- SHA512 0ac1b06bcb6e66d4d326fc73c0573a3caefb54e343e0f7e0298e9af08e15db9432375dbccc51a1abbd6a900a5e21a64dcaad58d266a114b01d9455aeebeef3d5
- SSDEEP 12288:3qVxi0ZmVhGfA8gFlkPdcarfoxpQGyHua8pyE/XPVPYo:4xJRrfQry4yE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral28 behavioral29

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Legitimate hosting services abused for malware hosting/C2

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29