General

  • Target

    Discord Hook.zip

  • Size

    278.1MB

  • MD5

    ce3495abb6ca3fa7c6e88e7342504a5d

  • SHA1

    40ae430687a7bda74d5f4993de2d9a7b4a4780b6

  • SHA256

    ce0017db0d3a9f57cb6aadbb308bd4e1e5a7b9de6a35ea897daecbc47fcd94b5

  • SHA512

    e89c5c2fda28e08fe9d657e9d9964d550d39ea260657befa86e200701b96e9d9275880aa169c364f3922adcabd0181ca11b72f2d8421de3a7feabac2a43b81dd

  • SSDEEP

    6291456:xOHqBiSsw2c6mhv3XvNUzDzmFrGrGDGZt5gjTDkZc7k5puCA2:cqB+c6i3myFarfgjTyMk5pBz

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord Hook.zip
    .zip
  • discord_voice.rar
    .rar
  • capture_helper.exe
    .exe windows:6 windows x64 arch:x64

    b480bc4b77616640a8e65de66fa4ec00


    Code Sign

    Headers

    Imports

    Sections

  • discord_voice.node
    .dll windows:6 windows x64 arch:x64

    7f9d03dababaef80f8a1f690ce9bb6d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gpu_encoder_helper.exe
    .exe windows:6 windows x64 arch:x64

    b3e3ae2a64e3bf025c8e45e72a7f7ee5


    Code Sign

    Headers

    Imports

    Sections

  • index.js
    .js
  • mediapipe.dll
    .dll windows:6 windows x64 arch:x64

    c131ba9dca7624ac089c3aa733ea2eaf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • node_modules/.yarn-integrity
  • openh264-2.2.0-win64.dll
    .dll windows:6 windows x64 arch:x64

    98f946cee94de86ddbd8fd8f37522dfe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • files/hook.dll
    .dll windows:6 windows x64 arch:x64

    fc8a5754f1fbe8934b51a4726e74eaac


    Headers

    Imports

    Sections

  • files/injector.exe
    .exe windows:6 windows x64 arch:x64

    8f18ef3a00bfd699ac5d69caeb261960


    Headers

    Imports

    Sections

  • how to get hook and how to detect it.mp4