General

  • Target

    source_prepared.exe

  • Size

    12.0MB

  • Sample

    241005-2ldkmazbrg

  • MD5

    3e8a1db0eebcfb6e0a1e576b6ae083e0

  • SHA1

    d58534ae893fb8b1e5ec1ce61163c58f4cc580b1

  • SHA256

    5cc9f89fa897d748305dc7db2cfc0e6cdab0497c63e10916618d4f43e0d9d116

  • SHA512

    fa1f4c4426e66739af25cc5d72f1e583cf484d61a552d77c0ccdc8bb382d35e831d260436ddfe10f4949bc2edbacba0a9a6cddec605208d297e1f3d2a57b5db2

  • SSDEEP

    393216:OJhf4E5EL+9qzt3Uf5hLzz7EAXXB8Wwb:a3Q+9qxmLzz7FmWw

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      12.0MB

    • MD5

      3e8a1db0eebcfb6e0a1e576b6ae083e0

    • SHA1

      d58534ae893fb8b1e5ec1ce61163c58f4cc580b1

    • SHA256

      5cc9f89fa897d748305dc7db2cfc0e6cdab0497c63e10916618d4f43e0d9d116

    • SHA512

      fa1f4c4426e66739af25cc5d72f1e583cf484d61a552d77c0ccdc8bb382d35e831d260436ddfe10f4949bc2edbacba0a9a6cddec605208d297e1f3d2a57b5db2

    • SSDEEP

      393216:OJhf4E5EL+9qzt3Uf5hLzz7EAXXB8Wwb:a3Q+9qxmLzz7FmWw

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      c203f54e778a6fb9bf0affd22a554e16

    • SHA1

      04a327233ff73ed4a0daf6b7c709fca0d7099dfd

    • SHA256

      37cd558cf2bb159ee67adc81672752c35941c68f3e8e6a5c358fbc3f39ed02d6

    • SHA512

      0abbb733e9fdebf5e95f9087163fa824f0e957a6b396a7c64288fad8bf44f6b572e4a93e606cb290c08f816617bfb88185356aa62c04c568a7f0b70e1d9cfe78

    • SSDEEP

      192:kdqqYaugepe/znewR4Bt3Y3ks4NS8Ra2hy4hYd/VnVA:uYavk6ze3t3Y3Nraa2hlUtVA

    Score
    3/10
    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      0504b82cde99fbefcd65b243ab38924f

    • SHA1

      1ff59e1c8fab9b0d114b3dd197716d69517180b6

    • SHA256

      e109c67ce0c720d6248062c5a7cc62d5238fa2066f5c846afc3f9749cf06d022

    • SHA512

      ef4707427e48a6590353520ce1399dc184e2974601cfaa976daf2a6ffbf37348c5672b2ceaeed887024f40475f22c29afb106a21455c90142560a84225331cfc

    • SSDEEP

      96:pCr+9UjbMMKikSnoJn8ybA6HUWcY/x2uSFQL5EChjvNlNRjpkUBvZFirppjFzuJV:srVeikp6QfUFWxPfKI11qVpj87+AiHjS

    Score
    3/10
    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      10908e48fecf78aebf1635fa0a3ebd62

    • SHA1

      03c779c90572da380543c51ea88415958b67fb51

    • SHA256

      e7c0fad22a8e890738c3f3f8ff82a11862b18a28bf608b37cd7759af3efd5e3a

    • SHA512

      f8a2197443e052ce8acb05685c67d9f076a169361297ccb69f598e6d101af599a1fd5b1612c53ca21e9df526c0ed977bbcb7576ff4abf359f3a795977bf8bfaa

    • SSDEEP

      96:vDh/7Y8hGPU6KGDweCPsUXBK84MCdG0fyWtUgJup1k935r:vVR3Jre4sUXBr4XG0Xds1kF5r

    Score
    3/10
    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      06801a90aeacc1683c501f76782e354d

    • SHA1

      ec35c5d5826596b49569ec9ad073bd94fcc52f74

    • SHA256

      f7f03c4c5bf4bfe8fa6f00cd1b9d0370c3af46391b57c78e914efc505b24daf7

    • SHA512

      bba6e117a3fcf1b6431ac192d5b18f5a6dabf1ce0aa65ea75dfe2ed47197a1085bd979ed74aa2af0bd89228a735ad7c30bf9f940a0d61584da137877af0240c2

    • SSDEEP

      192:0tkw4WyLahT8iIc022yxjeDiUhY/vrvF6:dw4WyLaR3CQxEj

    Score
    3/10
    • Target

      source_prepared.pyc

    • Size

      173KB

    • MD5

      b2d4c6f8a454fbb3d5d56695e02dc0b0

    • SHA1

      6471d3419be76e7748e7a562effad43627804cc5

    • SHA256

      66a2ac17a55f2b031b52f79b6f9ed5599a4bc5cabe04fda522ed072be12f554d

    • SHA512

      b489f2c3f3c2f0637d426d60fbc5eaa81d3be09401d01a1564c4dcde159cb8d93e5a4d92a76587b707be90fee51c16695f768725a5ae9f59bc8d4c9fee5e4af9

    • SSDEEP

      3072:ydHb+sxMhZz2bHdlfYSPpoI7iDbqWxQKhQpHQhJYvsicM:yxFx2ZAd1powQL61UCsA

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks