General

  • Target

    Discord.Image.Logger.exe

  • Size

    4.5MB

  • MD5

    2aa9588877a9951a734a0952df0a5aaf

  • SHA1

    ce5f737c4f345b206ab5fb0a0bf32f11bd63ca66

  • SHA256

    c23cd068b8b9a82a4dc6f677a114e09e8019d0bfeb62714166b9ca26305511bc

  • SHA512

    e0d46af417907f05c401f27af1d715de60dbe170fb2f4fd185e694843e1dc7acd001b272711386af6b2c878e038f4995be62c45ee4ef38c04ce1dcc44df48715

  • SSDEEP

    98304:RQf3s64R9ybzUcwti78OqJ7TPBF3ZlHHgkWJ0P39qXSaDv:8zUcwti7TQlF3ZxxWJSUnDv

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord.Image.Logger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections