General

  • Target

    source_prepared.exe

  • Size

    6.8MB

  • Sample

    241015-wnp4jsyejb

  • MD5

    30adcdd08f9f8b2ab6d3ed01886bcda2

  • SHA1

    f56ccc967730fc6139fff1dc19b033c07f60c424

  • SHA256

    5641362511a32a806a5bf59e45b34628917e5ecfcc9fa48b8468c83811098467

  • SHA512

    fa01f284c1d1e8e7c98646904689848ea5adaef6a898bdb37f1264f465edae52e2502784683841acc61e56bad9ddad88bcabbed4e8c77173478c22f7755c44ac

  • SSDEEP

    196608:Elb8ijtW5Pd3PKXkZSJ1D3qU+S+ZzzvVvIcv4RJ:E58H3PdZq2zzpn0

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      6.8MB

    • MD5

      30adcdd08f9f8b2ab6d3ed01886bcda2

    • SHA1

      f56ccc967730fc6139fff1dc19b033c07f60c424

    • SHA256

      5641362511a32a806a5bf59e45b34628917e5ecfcc9fa48b8468c83811098467

    • SHA512

      fa01f284c1d1e8e7c98646904689848ea5adaef6a898bdb37f1264f465edae52e2502784683841acc61e56bad9ddad88bcabbed4e8c77173478c22f7755c44ac

    • SSDEEP

      196608:Elb8ijtW5Pd3PKXkZSJ1D3qU+S+ZzzvVvIcv4RJ:E58H3PdZq2zzpn0

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      discord_token_grabber.pyc

    • Size

      8KB

    • MD5

      fc5c154670d1fde5b5dc7b4315ec91dd

    • SHA1

      2c81c6dd874649fdbe84a35f42c4ef16eeb96901

    • SHA256

      eb97e01db022a591db40157b56e8fa38b123a4e479b58298b2a4fb0d4a4e4ada

    • SHA512

      d9f37728c7737fe8408673c95d4846c49983506b86a65bdbb044088e4133608114cdf06f412959a01e48355c6d75b1d269435e9ea4ec2cba206377ffe6b579f5

    • SSDEEP

      192:A9RJpCmujbInthfHPU06e11tDQErZjcFDe4z:KJpCmcGr/PjDLFjczz

    Score
    3/10
    • Target

      get_cookies.pyc

    • Size

      5KB

    • MD5

      c09b8ed0a960b251fc5a3ce42979d3eb

    • SHA1

      a2616f789ab6bc4631b3f0259648812ef6e9291f

    • SHA256

      5b0bcdeab7ce6c1b5ba87a88de06653ba9f77f22872e01bafd8e54155fd3ffa7

    • SHA512

      2031915a530d236e519bf346a2fe4769279817595fd062869479a66d1f42cf2793449aa4fc76b7b7ef51070d85a7ad1e0abbaf2d5611fc248909d0e35967c944

    • SSDEEP

      96:GU4BjBMvk8RJnEOW+xVBcnqiicI47CXBxmSiWeBYJ0ZqPmfkMglcWN2l:AS7ExYXPipI8+xmSIeWIPNlGWU

    Score
    3/10
    • Target

      misc.pyc

    • Size

      2KB

    • MD5

      d271b36d2b3510d0083232d114c5684a

    • SHA1

      c92fe55f3ca27489efbcd37f97a4cab215b11487

    • SHA256

      5b55436412985f9944fa79cdd9d3dc6c523e615b7c15886f4910e41d0d808141

    • SHA512

      b5d9a9c392cad3d005ccd437dbd0a475c26a217783982760d958b5e4002befc4c17fc71503d53d12c95eb93ca03cb0513446804a20e36f7c17865c7d275206e7

    Score
    3/10
    • Target

      passwords_grabber.pyc

    • Size

      4KB

    • MD5

      2708355598eb0672737d920607575511

    • SHA1

      e8b93285b34b38f3cf74f6f41e83c49eafd041e9

    • SHA256

      81a588db8c8a2955c652490ef5437fe09863eec99cddf3b9f74aac13c87ceb8c

    • SHA512

      9f94369adf7232e01a73bbf65acb17ee6d8f98512943ff8b9376e5e7c1fa70d30548443922336aadca48e76545b54a6cdb6081d73ee07b6353e80d916793a0c0

    • SSDEEP

      96:CAPDnTWe0h+2PvgWxU2F7D+x3vv/qXO6oaL6N3UU63X9k68RgKlvM7CrBwApGq:vzCXh+yV56lv/qFtIEUS9wM7CrJpf

    Score
    3/10
    • Target

      source_prepared.pyc

    • Size

      63KB

    • MD5

      fdc09f129473e524c491ae79f44b8a59

    • SHA1

      29f6ae8b3b942f808d0cdc283970ff71e668dbbf

    • SHA256

      cc880696781b56da890b2debae0fbad6a9f714ebfefe398d1e56dbdc467bf2d2

    • SHA512

      65cea897d4a6285109a4b4dcce85580d69cb9b8cf0cfc85840885fb3b702ca6ed3bec71abc91326f6d0015065c493588b471e5fdb76e99e321d53344d17026f3

    • SSDEEP

      768:wbXmUqlPniou3Ti2zXwhdG87YbL7l9FZwDU6jqnWo5bleSCkO579qfikwth9iNdt:wJqlPV6jwK8kZdKEpqan4hogoocOzV78

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks