Overview
overview
10Static
static
10Credit+Miner (1).rar
windows7-x64
3v2/Main.py
windows7-x64
3v2/Proxy.txt
windows7-x64
1v2/Run.exe
windows7-x64
7discord_to...er.pyc
windows7-x64
3get_cookies.pyc
windows7-x64
3misc.pyc
windows7-x64
3passwords_grabber.pyc
windows7-x64
3source_prepared.pyc
windows7-x64
3v2/Settings.json
windows7-x64
3v2/recaptc...ass.py
windows7-x64
3v2/tokens.txt
windows7-x64
1Resubmissions
22-08-2024 19:09
240822-xtvrnashnb 10Analysis
-
max time kernel
117s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
22-08-2024 19:09
Behavioral task
behavioral1
Sample
Credit+Miner (1).rar
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
v2/Main.py
Resource
win7-20240705-en
Behavioral task
behavioral3
Sample
v2/Proxy.txt
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
v2/Run.exe
Resource
win7-20240729-en
Behavioral task
behavioral5
Sample
discord_token_grabber.pyc
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
get_cookies.pyc
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
misc.pyc
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
passwords_grabber.pyc
Resource
win7-20240708-en
Behavioral task
behavioral9
Sample
source_prepared.pyc
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
v2/Settings.json
Resource
win7-20240705-en
Behavioral task
behavioral11
Sample
v2/recaptcha_bypass.py
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
v2/tokens.txt
Resource
win7-20240708-en
General
-
Target
v2/tokens.txt
-
Size
46B
-
MD5
8568737b16c6aac101c0c63034659500
-
SHA1
cd320c4a9730db594178d389fe47c657acbd94ea
-
SHA256
c22c327a5c2cb6052ee63afd489272912421a6732b55a92c393ea748c3d16f99
-
SHA512
0a84abcae2a31311e15c9ab52eaffa9689b8b80484e13c96c35634800faf8bb1a6a7359c400905a554a8c508df8d52765e3672c2049278cf0fc7fd25cefd3883
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid Process 1908 NOTEPAD.EXE