General

  • Target

    t.rar

  • Size

    14.7MB

  • MD5

    d27202d50ca0cbcf53b1d0c52b1c83da

  • SHA1

    d437ec174cae1133503169c8bf656a6d6117381d

  • SHA256

    174e6e28792c78757e63ec03650e85e639c16825aab6a93adc8db0327bc91db7

  • SHA512

    c90f199f292a8be6eec2a847f15e074929f3993f3fa8164432b09fcdbe735925e0160bb0ce41f96978c69a168a0a1fdd98bba409114b7f253731ca358e9b496e

  • SSDEEP

    393216:Hpd2Fl0+xfHZuqzDZw8CX13G9AiavN+fsGiMBDTTnj:rgNpHZM8COCesGiMNX

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • t.rar
    .rar
  • t/discord_voice.rar
    .rar
  • capture_helper.exe
    .exe windows:6 windows x64 arch:x64

    b480bc4b77616640a8e65de66fa4ec00


    Code Sign

    Headers

    Imports

    Sections

  • discord_voice.node
    .dll windows:6 windows x64 arch:x64

    7f9d03dababaef80f8a1f690ce9bb6d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gpu_encoder_helper.exe
    .exe windows:6 windows x64 arch:x64

    b3e3ae2a64e3bf025c8e45e72a7f7ee5


    Code Sign

    Headers

    Imports

    Sections

  • index.js
    .js
  • mediapipe.dll
    .dll windows:6 windows x64 arch:x64

    c131ba9dca7624ac089c3aa733ea2eaf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • node_modules/.yarn-integrity
  • openh264-2.2.0-win64.dll
    .dll windows:6 windows x64 arch:x64

    98f946cee94de86ddbd8fd8f37522dfe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • t/hook.dll
    .dll windows:6 windows x64 arch:x64

    fc8a5754f1fbe8934b51a4726e74eaac


    Headers

    Imports

    Sections

  • t/injector.exe
    .exe windows:6 windows x64 arch:x64

    8f18ef3a00bfd699ac5d69caeb261960


    Headers

    Imports

    Sections

  • t/leaked hook.txt