Overview

overview

10

Static

static

10

AutoDiscorder.zip

windows7-x64

7

AutoDiscorder.zip

windows10-2004-x64

1

AutoDiscorder.exe

windows7-x64

7

AutoDiscorder.exe

windows10-2004-x64

9

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

PW IS 123.txt

windows7-x64

1

PW IS 123.txt

windows10-2004-x64

1

Readme.txt

windows7-x64

1

Readme.txt

windows10-2004-x64

1

Troubleshooting.txt

windows7-x64

1

Troubleshooting.txt

windows10-2004-x64

1

Resubmissions

28-10-2024 18:17

241028-wxh2lavdqr 10

28-10-2024 17:33

241028-v44q7sslbq 10

Analysis

  • max time kernel
    607s
  • max time network
    619s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    28-10-2024 18:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Readme.txt

  • Size

    652B

  • MD5

    9685bc6354dbb16a384ffe046c77db1e

  • SHA1

    642e0aef62e575cef31de6e1877b84502a1cba8c

  • SHA256

    8879add66dfde818d9d08d6adda89bc44a99d83e050ff21035a444bb42221b10

  • SHA512

    b3d4123caeb243d0356c888a80c3305e57cf4042ea5205d1ba244d92e16d6501b5cfa503295b546365deb5a337175419406ba063cdad4a3c97f4b5473805cf2c

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Readme.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads