General

  • Target

    source_prepared.exe

  • Size

    75.1MB

  • Sample

    241231-qc14satqbr

  • MD5

    976291f94884c81ac960f2cc14c8e928

  • SHA1

    ee40881dedc8941026e28ced3139370607fc9eca

  • SHA256

    f1d5a873c18d634aa1c3d9646a021f357784dadcb1629f5d3bebf4ebac15a27f

  • SHA512

    c2e7013f760da5a91010c8e10983d36e74fcb737bd7aa42af245c66684d3e0c040923ba4ef731c71cc71f38e2069c23e3aacbc6c9614aa1cb45b4432a10d7e0f

  • SSDEEP

    1572864:M21lIO0USk8IpG7V+VPhqEsE71Hln1AiYKrhbOoAkCl6Xi0guQ8WgF:FW+SkB05awEbHlDrFoB6Xi0tQ8W

Score
10/10

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      75.1MB

    • MD5

      976291f94884c81ac960f2cc14c8e928

    • SHA1

      ee40881dedc8941026e28ced3139370607fc9eca

    • SHA256

      f1d5a873c18d634aa1c3d9646a021f357784dadcb1629f5d3bebf4ebac15a27f

    • SHA512

      c2e7013f760da5a91010c8e10983d36e74fcb737bd7aa42af245c66684d3e0c040923ba4ef731c71cc71f38e2069c23e3aacbc6c9614aa1cb45b4432a10d7e0f

    • SSDEEP

      1572864:M21lIO0USk8IpG7V+VPhqEsE71Hln1AiYKrhbOoAkCl6Xi0guQ8WgF:FW+SkB05awEbHlDrFoB6Xi0tQ8W

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      discord_token_grabber.pyc

    • Size

      8KB

    • MD5

      e65aa3a3452d4cc97930c3af058f1c10

    • SHA1

      81065dc50886648e1895b4d4dda99fc21e2b28c2

    • SHA256

      2468bc7f83adbcfd3c2fd86c3340ccc6f98aeec288f318494d1607907ffcd468

    • SHA512

      0a45d12010203c5a5b33fae57892b7a812e1e0c7fbefbeb08bc1d7ad2e5bbf4cb4f8761bda29fc695808c30ec0569b7f5f039c2ea5a261108eb7ed7f2f71494f

    • SSDEEP

      192:iQR8LslmujbQybyo5HptlYwqJFD7U6r18ZPuNz:vNmcQcpt+D7Ua18uz

    Score
    3/10
    • Target

      get_cookies.pyc

    • Size

      5KB

    • MD5

      ab0f8084441f8312bffc9d26193967ab

    • SHA1

      82b9c1c9cd1f5a38ac2b415a96c88ce99d27455a

    • SHA256

      6f67d11524ed42b8990be66aed829232514b364746fdceea30e0213204427be4

    • SHA512

      1722dfe7200b5f8fef0cfc4188953621630c7ee8672586490b9309a40512eb7f99fc56ffe52f6a0970809a38e3bdd8ce1862ba6803fe6d09bdfacda1b3fe1732

    • SSDEEP

      96:4Q0jzMv/ppR+xVBcnqhLchLPxrpTkBWeBDFZcj3KldyzoZ:sSZYXPhYhLP12zij3KnyA

    Score
    3/10
    • Target

      misc.pyc

    • Size

      2KB

    • MD5

      5bff7de9304595611b9deeea55076bd3

    • SHA1

      ae5fd2f3fbac4b0587140ab41b30c4d3da286c75

    • SHA256

      39c73d32dce8fe34f56ca6fce56ae54ca99456c49fa04c949a45ca7d8e7355d9

    • SHA512

      4cb8277d8c02380679bcc19ec6cba2dae37b24058116e08cfec30f95a158c1c3b45590c79665ace9abbeda277f1f39be1e806fd90c8dae9a3c44cd69d1157679

    Score
    3/10
    • Target

      passwords_grabber.pyc

    • Size

      4KB

    • MD5

      dbd5603fbc95768a5f3f45e6e1f7f109

    • SHA1

      b1fa1a73c1e9e0ee63cccf5a81210a8aa39bf40a

    • SHA256

      657361e158e5b5d76cf2b615d58c7c34de2d06d40f1c049c0757019fadab5e13

    • SHA512

      310aabd4b5ef007faaaac149ea5b182c20eb3db2ea576e1039fc86d8ed5bb7e63b437d10c2c876ab40a0f9f7782dbfc5804d02cf12a0d74d9b1fe5b1a9a035d5

    • SSDEEP

      96:4APDnTWeYwD86gWxS6679kZOyfkoXyWQUUEXtH0lLCvpW1mhs0:FzCUD/S6UyRkpoUEKlLz1m+0

    Score
    3/10
    • Target

      source_prepared.pyc

    • Size

      64KB

    • MD5

      1c71ffd73742306ca751d832353d8845

    • SHA1

      00a43ddbe3eaa008ceb35922641bef5327246c46

    • SHA256

      8287d8566890cc9e4829e8610aa54f31d93bd84a3ba127d3b382b379fdfcbbd8

    • SHA512

      089679d1064687974ebfb1622f5bc4161a91b0bd86f81ae895d7de525d133bda56d1cf37d24fb491c6713f7e5e80ae97d2a5f7e854c4a9dc8f00c138fa1748d1

    • SSDEEP

      768:Hoad+obVSwxUgmLkx7YbJCjeAppQ6BdjxCV9PSd5zk4Q5VdB5ozK6VX+Ei4i:HocpSomQxtjeCBdjx8O1kdB5oe6VXS4i

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks