General

  • Target

    source_prepared.exe

  • Size

    16.0MB

  • Sample

    241020-zkq38ayhqg

  • MD5

    e9aa1e9ff8ddd1529467a58ef6a631b3

  • SHA1

    06f5fe2a2473900a317987750107c81b4ca381cd

  • SHA256

    34a8d64d334222a25c3cae2af58421086556cc8cdaa51d1224a8f40f176e0680

  • SHA512

    469153999e9b3d1f6251fe2ba34cc2f008a9ad1706fd22ab0e206c386f518fe71780f52da56c2185e896029a57d0f88eaa044b55fc193b4e9a7076f7ea20e4bb

  • SSDEEP

    393216:BKjS/sRaIZo45d0iK1piXLGVEwrSo/NnsSaVyYdZdo:BmZnYDiXH+SoNmdo

Score
10/10

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      16.0MB

    • MD5

      e9aa1e9ff8ddd1529467a58ef6a631b3

    • SHA1

      06f5fe2a2473900a317987750107c81b4ca381cd

    • SHA256

      34a8d64d334222a25c3cae2af58421086556cc8cdaa51d1224a8f40f176e0680

    • SHA512

      469153999e9b3d1f6251fe2ba34cc2f008a9ad1706fd22ab0e206c386f518fe71780f52da56c2185e896029a57d0f88eaa044b55fc193b4e9a7076f7ea20e4bb

    • SSDEEP

      393216:BKjS/sRaIZo45d0iK1piXLGVEwrSo/NnsSaVyYdZdo:BmZnYDiXH+SoNmdo

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      9d27825766e1dd5e01da0ea3a74e3b81

    • SHA1

      29a6769330ea63b41961a009336790e44e1bdfe7

    • SHA256

      d5ed971b0e74fd0b811af76948a5f7d173c00ff97f6e7313f1089d91749ad6be

    • SHA512

      eaea42559e5b95b1e8dc24e73518ec0b1844a08c1426dce2dd829191882ef7a2179500a97ee79af828bab3d27acd1492f50562a5e7939fa3bca3da2cfeadf385

    • SSDEEP

      192:bOqqAm47Kauge+M6Df8fri+JDcNQshU8En5W4NXOYd/G7XW:wHavP578fbDWRm5FOUG7XW

    Score
    3/10
    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      3232629e868b431a139933fd54246752

    • SHA1

      15f777548080933cb87c9baadaab880d1e9f9dda

    • SHA256

      41f37e31c9866dfa920c3c01c014b221d9e35c73d56a32775c75ca36c79b1dc2

    • SHA512

      65ff8f292cf72c5e201e749855edef8f2aaa32632cf55a986045d1c892dc7bedeecac0c864e69008bb0779dabaddc035b1c533166e53fdfc21b6042150d8a7c8

    • SSDEEP

      192:srNe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:i0BifedokqYnuHN3gQ

    Score
    3/10
    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      36ed907d6c57862deacc25f4da2bde11

    • SHA1

      0e21743b8eff2688e13055bfe26467cd3af43559

    • SHA256

      8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087

    • SHA512

      89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4

    • SSDEEP

      96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g

    Score
    3/10
    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      cc180daa11732953527c69ac7bbea3b1

    • SHA1

      24ea916374f1fe5981219c1c330ba8f851571e9e

    • SHA256

      6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe

    • SHA512

      5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb

    • SSDEEP

      192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER

    Score
    3/10
    • Target

      source_prepared.pyc

    • Size

      171KB

    • MD5

      3e1bf140409e45d5d5ac714a19da6555

    • SHA1

      09e471d8cc6a94083eb2140a1d097187893bf090

    • SHA256

      62e5f7743e2302c136ce21fc3f1eca473bd779fbeba2a323aa37c5e618a01c3c

    • SHA512

      025639e644b62ef9dee677ce3203080bf25e447e7f25215e86634ad346a2f19099637c08bf4e9e1fcaada78e2966fbd249dc20f15128ab584c6aa70080af5fbe

    • SSDEEP

      3072:N0UawFCpYRSZS8BVfxUc2oH7iD6GxnhQp0p0pjsilDY:NJQpaSDBf2oun6a2sKY

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks