General

  • Target

    source_prepared.exe

  • Size

    9.9MB

  • Sample

    250119-ypvfrstpar

  • MD5

    451b2965a986e311f82adf11ffa9bd40

  • SHA1

    85eb139945997b1fab0875d4c757c25ea31fb9f0

  • SHA256

    5ea0a29bdd0f8f27e16dd808177929055bb3fab60d6857dae34b6dd7a2f73e6b

  • SHA512

    82504c3c613b25afd3c1f3efaea7b71fd69116cc3db56ceb16a718cbfaa188f48b8c0a2e459016e5b80433f338e9a0dff2e1b01101d3766cd8f9c6ef2f9c2479

  • SSDEEP

    196608:vz3TNgekT6xlefMHiToFfTu+9ezDvlsUs/QV0AjQql0oHSEbqc0m5hsXYpOTyEQ1:7DNgekT6xEMHiToZTuh/lsUs/QVVl0o5

Score
10/10

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      9.9MB

    • MD5

      451b2965a986e311f82adf11ffa9bd40

    • SHA1

      85eb139945997b1fab0875d4c757c25ea31fb9f0

    • SHA256

      5ea0a29bdd0f8f27e16dd808177929055bb3fab60d6857dae34b6dd7a2f73e6b

    • SHA512

      82504c3c613b25afd3c1f3efaea7b71fd69116cc3db56ceb16a718cbfaa188f48b8c0a2e459016e5b80433f338e9a0dff2e1b01101d3766cd8f9c6ef2f9c2479

    • SSDEEP

      196608:vz3TNgekT6xlefMHiToFfTu+9ezDvlsUs/QV0AjQql0oHSEbqc0m5hsXYpOTyEQ1:7DNgekT6xEMHiToZTuh/lsUs/QVVl0o5

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      discord_token_grabber.pyc

    • Size

      8KB

    • MD5

      c0f0578f41b8da4ddfc31beb9ba1fa4c

    • SHA1

      138b57d0e38b2c855e8ea8dc1dd93f5536399f32

    • SHA256

      f77988cdc9646ae935d75e4593b8eaac04cb923ac9ab7c9cf6fe7fc76be34a0b

    • SHA512

      d90f452a8250ba70fdcc9ba06daa62b1bf9caa8eb36fd0ec680b3330f58c7e98d23211f655cae5af8c22910389a22a20ce7073d218fa873bac85e6dc7080ca4b

    • SSDEEP

      192:eQR84Uimujbw8bWtUgMl6eqJFD7U6r1HLKCTz:rNmcw8gMwD7Ua1HWqz

    Score
    3/10
    • Target

      get_cookies.pyc

    • Size

      5KB

    • MD5

      5bb761ec58b81256a0765d440cca4454

    • SHA1

      b179d425308e7cf5d87fd4b839755c4e43c7406c

    • SHA256

      efacb8b4952df81de1883f3bc49bfff785c42f5a6c80897731fa54747755ea59

    • SHA512

      48a1fa7c95b58f88c596541f4009ab7dda3c6300632967d11b151b594ff14d8f12187249a8e73ebebe429276384e5d7fe0587e3d554bcfc18ebd1909a78c2c36

    • SSDEEP

      96:sW0j9Mvk8EhsJnZ+xVBcnqiic7b+73Jps/hWeB1KZ+j3ZlcTKknY+:8Ssh2ZYXPip7bu3WP+kj3ZGWh+

    Score
    3/10
    • Target

      misc.pyc

    • Size

      2KB

    • MD5

      140f9475f7814550934537e82e1da977

    • SHA1

      de8eec9262333ea8205735d617f75b38905e0a41

    • SHA256

      738fa0d7dacbaf78e292717acbb2a537ad07409b0d9e0bf24e43effe86c8f264

    • SHA512

      120d0c93046ef884697a24fec9521e3cf9705221fde3009c914c1b695e1cbb809b8f6d2de0a5a4ec951d04968ab78ec88a8cc09f684098057e3d4c12a1492ad3

    Score
    3/10
    • Target

      passwords_grabber.pyc

    • Size

      4KB

    • MD5

      6acb91a4ae5347b11e8a6513d28e2c3d

    • SHA1

      8f85deb4378be8f8d72e5e055cfc953c6e0f6917

    • SHA256

      c97ac5b1b451e7bc17e9c5025130dd6779a4469afe4a2ff539fb45d4dec49554

    • SHA512

      0b4a4d914c7d6941c238289c1e79646820622858f2e8ba26ed79cc93c26e50b593297fe66767c13c11f815f2b39eb1c794cb3a28fe07e34a6b1ad48b8a339a53

    • SSDEEP

      96:EAPDnTWeYwDOzgWxd2p79kMryOngqEyWjMUUexUAUlLEBW9ZmZEp4:xzCUD2494qrlu/UemPlLh9Zm+p4

    Score
    3/10
    • Target

      source_prepared.pyc

    • Size

      64KB

    • MD5

      d61b4b82695303358ac03b5574e7b252

    • SHA1

      0afb0d678fd391d3f087fe6a0e1bb3f918479158

    • SHA256

      efe9ab076bfe434b07a77b88e4b4dff704508630d3a7ed6619428818f9bf1999

    • SHA512

      615f58567da2ac93707a60ea548ee2fbc8044f3d66df6792d0da295a06767caf3a1dbfa7cc5f71e70016acb36f7698813c21b952b6844215206122e445a2497c

    • SSDEEP

      1536:k+31So8Vw1R1jDNDjR+mQxdBaonwMpA9jTh6:TgNAXFl+moaonw8

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks