Overview

overview

10

Static

static

10

AutoDiscorder.zip

windows7-x64

7

AutoDiscorder.zip

windows10-2004-x64

1

AutoDiscorder.exe

windows7-x64

7

AutoDiscorder.exe

windows10-2004-x64

9

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

PW IS 123.txt

windows7-x64

1

PW IS 123.txt

windows10-2004-x64

1

Readme.txt

windows7-x64

1

Readme.txt

windows10-2004-x64

1

Troubleshooting.txt

windows7-x64

1

Troubleshooting.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    98s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-10-2024 19:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Readme.txt

  • Size

    652B

  • MD5

    9685bc6354dbb16a384ffe046c77db1e

  • SHA1

    642e0aef62e575cef31de6e1877b84502a1cba8c

  • SHA256

    8879add66dfde818d9d08d6adda89bc44a99d83e050ff21035a444bb42221b10

  • SHA512

    b3d4123caeb243d0356c888a80c3305e57cf4042ea5205d1ba244d92e16d6501b5cfa503295b546365deb5a337175419406ba063cdad4a3c97f4b5473805cf2c

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Readme.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads