Overview
overview
3Static
static
1discord-bo...er.zip
windows7-x64
1discord-bo...er.zip
windows10-2004-x64
1discord-bo...ignore
windows7-x64
3discord-bo...ignore
windows10-2004-x64
3discord-bo...NG.yml
windows7-x64
3discord-bo...NG.yml
windows10-2004-x64
3discord-bo...ignore
windows7-x64
3discord-bo...ignore
windows10-2004-x64
3discord-bo...FAQ.md
windows7-x64
3discord-bo...FAQ.md
windows10-2004-x64
3discord-bo...DME.md
windows7-x64
3discord-bo...DME.md
windows10-2004-x64
3discord-bo...oad.js
windows7-x64
3discord-bo...oad.js
windows10-2004-x64
3discord-bo...on.png
windows7-x64
3discord-bo...on.png
windows10-2004-x64
3discord-bo...g.yaml
windows7-x64
3discord-bo...g.yaml
windows10-2004-x64
3discord-bo...dex.js
windows7-x64
3discord-bo...dex.js
windows10-2004-x64
3discord-bo...e.json
windows7-x64
3discord-bo...e.json
windows10-2004-x64
3discord-bo...on.zip
windows7-x64
1discord-bo...on.zip
windows10-2004-x64
1discord-bo...28.jpg
windows7-x64
3discord-bo...28.jpg
windows10-2004-x64
3discord-bo...28.png
windows7-x64
3discord-bo...28.png
windows10-2004-x64
3discord-bo...16.jpg
windows7-x64
3discord-bo...16.jpg
windows10-2004-x64
3discord-bo...16.png
windows7-x64
3discord-bo...16.png
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
17-10-2024 23:13
Static task
static1
Behavioral task
behavioral1
Sample
discord-bot-client-master.zip
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
discord-bot-client-master.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
discord-bot-client-master/.dockerignore
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral4
Sample
discord-bot-client-master/.dockerignore
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
discord-bot-client-master/.github/FUNDING.yml
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
discord-bot-client-master/.github/FUNDING.yml
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
discord-bot-client-master/.gitignore
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
discord-bot-client-master/.gitignore
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
discord-bot-client-master/FAQ.md
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral10
Sample
discord-bot-client-master/FAQ.md
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
discord-bot-client-master/README.md
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
discord-bot-client-master/README.md
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
discord-bot-client-master/download.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
discord-bot-client-master/download.js
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
discord-bot-client-master/electron/buildResources/icon.png
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral16
Sample
discord-bot-client-master/electron/buildResources/icon.png
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
discord-bot-client-master/electron/dist/builder-effective-config.yaml
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
discord-bot-client-master/electron/dist/builder-effective-config.yaml
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
discord-bot-client-master/electron/index.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
discord-bot-client-master/electron/index.js
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
discord-bot-client-master/electron/package.json
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
discord-bot-client-master/electron/package.json
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
discord-bot-client-master/extension.zip
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral24
Sample
discord-bot-client-master/extension.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
discord-bot-client-master/extension/images/128.jpg
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
discord-bot-client-master/extension/images/128.jpg
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
discord-bot-client-master/extension/images/128.png
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral28
Sample
discord-bot-client-master/extension/images/128.png
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
discord-bot-client-master/extension/images/16.jpg
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
discord-bot-client-master/extension/images/16.jpg
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
discord-bot-client-master/extension/images/16.png
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
discord-bot-client-master/extension/images/16.png
Resource
win10v2004-20241007-en
windows10-2004-x64
General
-
Target
discord-bot-client-master/extension.zip
-
Size
128KB
-
MD5
9e6cdb75673f1ec47557a109ba5020af
-
SHA1
aae2a10c946b5b25995e9c247752c032837c3f07
-
SHA256
6db4483c8be3ee2cf7b6dacd9069d241ef099e5716ad671752023ac0bffff992
-
SHA512
f5f4d5ce02fe9a3fde499dbedbf9578fbacfabcf201d832b8e029d8bf425e9702ed73ed33bfae94fc7157fb065ba3341b46a9340ffbe492c681a3faec2dac024
-
SSDEEP
3072:QQP1h7NkDw6xawE1+vgTPQkdncOO2PQkdncOfwjdbp:QA1h7Yc+vO/NcOOI/NcOojdF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2352 7zFM.exe Token: 35 2352 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2352 7zFM.exe