General

  • Target

    imagefilestodiscord.exe

  • Size

    71.0MB

  • Sample

    241030-3sea6sthlj

  • MD5

    bd87e006b624e73b0f3976f4add97cd4

  • SHA1

    d41ded1498b6b5795256a0ec8df4de8fadaced39

  • SHA256

    7d0541dad72de033a246df3271fdf184d747717edefd44dd4dd38df31c59dc19

  • SHA512

    4e9a18f81517cf3d9f93a0f4e06bdc3c10ed41f2778348b3c1ebd8662095a03ab7b8b4fdf03e23c0d5610a0756e798c8bb5a0a9fc166119c5740fcb5e657838c

  • SSDEEP

    1572864:a6j01CpyJE/SZ56W9jqKVqWTNOXWxtQSNjGqFOPV5GiIJ2qHWB75iVB6Um:fj7psUysW9j3qWTcKCsGPrcJ2qHO5iV4

Malware Config

Targets

    • Target

      imagefilestodiscord.exe

    • Size

      71.0MB

    • MD5

      bd87e006b624e73b0f3976f4add97cd4

    • SHA1

      d41ded1498b6b5795256a0ec8df4de8fadaced39

    • SHA256

      7d0541dad72de033a246df3271fdf184d747717edefd44dd4dd38df31c59dc19

    • SHA512

      4e9a18f81517cf3d9f93a0f4e06bdc3c10ed41f2778348b3c1ebd8662095a03ab7b8b4fdf03e23c0d5610a0756e798c8bb5a0a9fc166119c5740fcb5e657838c

    • SSDEEP

      1572864:a6j01CpyJE/SZ56W9jqKVqWTNOXWxtQSNjGqFOPV5GiIJ2qHWB75iVB6Um:fj7psUysW9j3qWTcKCsGPrcJ2qHO5iV4

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks