Overview
overview
6Static
static
1Discord-Se...in.zip
windows11-21h2-x64
3Discord-Se...n/.env
windows11-21h2-x64
3Discord-Se...ignore
windows11-21h2-x64
3Discord-Se...DME.md
windows11-21h2-x64
3Discord-Se...e.json
windows11-21h2-x64
3Discord-Se...dex.js
windows11-21h2-x64
3Discord-Se...ate.ts
windows11-21h2-x64
1Discord-Se...dex.js
windows11-21h2-x64
3Discord-Se...oad.js
windows11-21h2-x64
3Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...fos.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ons.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
1Discord-Se...ons.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...ata.ts
windows11-21h2-x64
6Discord-Se...dex.ts
windows11-21h2-x64
6Discord-Se...til.js
windows11-21h2-x64
3Discord-Se...unc.js
windows11-21h2-x64
3Discord-Se...s.json
windows11-21h2-x64
3Discord-Se...rt.bat
windows11-21h2-x64
1Analysis
- max time kernel
211s - max time network
280s - platform
windows11-21h2_x64 - resource
win11-20241023-en - resource tags
arch:x64arch:x86image:win11-20241023-enlocale:en-usos:windows11-21h2-x64system - submitted
13/11/2024, 16:16
Static task
static1
Behavioral task
behavioral1
Sample
Discord-Server-Cloner-2x-main.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Discord-Server-Cloner-2x-main/.env
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
Discord-Server-Cloner-2x-main/.gitignore
Resource
win11-20241023-en
Behavioral task
behavioral4
Sample
Discord-Server-Cloner-2x-main/README.md
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
Discord-Server-Cloner-2x-main/package.json
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
Discord-Server-Cloner-2x-main/src/index.js
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
Discord-Server-Cloner-2x-main/src/src/create.ts
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
Discord-Server-Cloner-2x-main/src/src/index.js
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
Discord-Server-Cloner-2x-main/src/src/load.js
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
Discord-Server-Cloner-2x-main/src/src/types/AfkData.ts
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
Discord-Server-Cloner-2x-main/src/src/types/BackupData.ts
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
Discord-Server-Cloner-2x-main/src/src/types/BackupInfos.ts
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
Discord-Server-Cloner-2x-main/src/src/types/BanData.ts
Resource
win11-20241007-en
Behavioral task
behavioral14
Sample
Discord-Server-Cloner-2x-main/src/src/types/BaseChannelData.ts
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
Discord-Server-Cloner-2x-main/src/src/types/CategoryData.ts
Resource
win11-20241023-en
Behavioral task
behavioral16
Sample
Discord-Server-Cloner-2x-main/src/src/types/ChannelPermissionData.ts
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
Discord-Server-Cloner-2x-main/src/src/types/ChannelsData.ts
Resource
win11-20241007-en
Behavioral task
behavioral18
Sample
Discord-Server-Cloner-2x-main/src/src/types/CreateOptions.ts
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
Discord-Server-Cloner-2x-main/src/src/types/EmojiData.ts
Resource
win11-20241007-en
Behavioral task
behavioral20
Sample
Discord-Server-Cloner-2x-main/src/src/types/LoadOptions.ts
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
Discord-Server-Cloner-2x-main/src/src/types/MemberData.ts
Resource
win11-20241007-en
Behavioral task
behavioral22
Sample
Discord-Server-Cloner-2x-main/src/src/types/MessageData.ts
Resource
win11-20241007-en
Behavioral task
behavioral23
Sample
Discord-Server-Cloner-2x-main/src/src/types/RoleData.ts
Resource
win11-20241007-en
Behavioral task
behavioral24
Sample
Discord-Server-Cloner-2x-main/src/src/types/TextChannelData.ts
Resource
win11-20241007-en
Behavioral task
behavioral25
Sample
Discord-Server-Cloner-2x-main/src/src/types/ThreadChannelData.ts
Resource
win11-20241007-en
Behavioral task
behavioral26
Sample
Discord-Server-Cloner-2x-main/src/src/types/VoiceChannelData.ts
Resource
win11-20241023-en
Behavioral task
behavioral27
Sample
Discord-Server-Cloner-2x-main/src/src/types/WidgetData.ts
Resource
win11-20241007-en
Behavioral task
behavioral28
Sample
Discord-Server-Cloner-2x-main/src/src/types/index.ts
Resource
win11-20241007-en
Behavioral task
behavioral29
Sample
Discord-Server-Cloner-2x-main/src/src/util.js
Resource
win11-20241007-en
Behavioral task
behavioral30
Sample
Discord-Server-Cloner-2x-main/src/utils/func.js
Resource
win11-20241007-en
Behavioral task
behavioral31
Sample
Discord-Server-Cloner-2x-main/src/utils/translations.json
Resource
win11-20241007-en
Behavioral task
behavioral32
Sample
Discord-Server-Cloner-2x-main/start.bat
Resource
win11-20241007-en
General
- Target Discord-Server-Cloner-2x-main/.gitignore
- Size 52B
- Sample241113-tqyscsvkb1
- SHA256 321d397f740cdfeb8e71879fe2e38529bdde53b528483eb26935f3929ca278a4
- MD5 86bc2c484e5d370b5e6c0e2513e2f64e
- SHA1 3e90fce6b453503b679c55d5cbb352cffd91a467
- SHA512 baca18fb14fcbc18d265057c2aae4a5a7f0369b6cbed22bf58e1c75eb1884af4ec3b823cf647262c7e4d62cee655d1d4559d08ef2cd79558d1279a1d846c4f8e
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4248760313-3670024077-2384670640-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4248760313-3670024077-2384670640-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3124 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Discord-Server-Cloner-2x-main\.gitignore1⤵
- Modifies registry class
PID:3804
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3124