Overview

overview

10

Static

static

10

w/MTE3NzIy...hE.txt

windows10-ltsc 2021-x64

1

Release/Di...at.exe

windows10-ltsc 2021-x64

10

builder.exe

windows10-ltsc 2021-x64

3

dnlib.dll

windows10-ltsc 2021-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    w.zip

  • Size

    443KB

  • Sample

    241203-mt3gdsxlhp

  • MD5

    7f891e1405dd731ddc8a3fd4461ce811

  • SHA1

    09861e7db65b60ecd115bf47b6436b62f2c87dfb

  • SHA256

    eea33e3d4c93932f44418a5649778907cb560a957e4aa21208e1fd65d7c8ac55

  • SHA512

    fec270302e4b6e4b4a4765c0b892c8b4837700f11441a1ad63168d5970a12cb7e01ede175cff0efb0ad91b005ef38a104c6fd9778cbba2c3e3830ad41939fc27

  • SSDEEP

    12288:ehJL3yGgLoSdDilX+F2ramKbYgMLj7llsLQX:oUGg8Uil/ramJhNX

Score
10/10
discordratdiscoverypersistenceratrootkitstealer

Malware Config

Targets

    • Target

      w/MTE3NzIyNzU5NjQ4MDY0MzA5Mg GgUtay DoJsOOKRElteARhE.txt

    • Size

      92B

    • MD5

      ab5d435aae0ff18e8649655bdde92cc5

    • SHA1

      c57fa02e183271218220cfb63505fb18bce910d5

    • SHA256

      9254aed7ee44478a89b7485c5e6c89bfceb298b0af33aaa0e0fca88211748864

    • SHA512

      f3718287442281398be41b3870a47d005b78e0248c264da623bf13f866e539fab147d7af4f11d35fc37408de46db7e01d7b1f88c072f204c2e2b13486e2e635e

    Score
    1/10
    behavioral1

    • Target

      Release/Discord rat.exe

    • Size

      79KB

    • MD5

      d13905e018eb965ded2e28ba0ab257b5

    • SHA1

      6d7fe69566fddc69b33d698591c9a2c70d834858

    • SHA256

      2bd631c6665656673a923c13359b0dc211debc05b2885127e26b0dce808e2dec

    • SHA512

      b95bfdebef33ac72b6c21cdf0abb4961222b7efd17267cd7236e731dd0b6105ece28e784a95455f1ffc8a6dd1d580a467b07b3bd8cb2fb19e2111f1a864c97cb

    • SSDEEP

      1536:YCH0jBD2BKkwbPNrfxCXhRoKV6+V+y9viwp:VUjBD2BPwbPNrmAE+MqU

    Score
    10/10
    discordratpersistenceratrootkitstealer
    behavioral2

    • Target

      builder.exe

    • Size

      10KB

    • MD5

      4f04f0e1ff050abf6f1696be1e8bb039

    • SHA1

      bebf3088fff4595bfb53aea6af11741946bbd9ce

    • SHA256

      ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa

    • SHA512

      94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12

    • SSDEEP

      96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs

    Score
    3/10
    discovery
    behavioral3

    • Target

      dnlib.dll

    • Size

      1.1MB

    • MD5

      508ccde8bc7003696f32af7054ca3d97

    • SHA1

      1f6a0303c5ae5dc95853ec92fd8b979683c3f356

    • SHA256

      4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a

    • SHA512

      92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d

    • SSDEEP

      24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww

    Score
    1/10
    behavioral4

MITRE ATT&CK Enterprise v15

Tasks