General

  • Target

    Nixware.zip

  • Size

    440KB

  • Sample

    250127-xb7y9s1raj

  • MD5

    1239f51775e01fba26731ddae3dcd14c

  • SHA1

    c98f0a358f2d54aad963bb97e30a5da2f4e7b47d

  • SHA256

    83d5fb17ee2380dbc3d6fba61fc880fe85b5bb129ebb4198f8570f33d344cea5

  • SHA512

    ad63cf26de52a919c840a776e63ba04a1952abcdd8db48a395791dc3cc7d1433505a200b55ff2130bb21126f6d53844a95393341b1b9ef71f56daca6c48c5a86

  • SSDEEP

    6144:UPe780iCUaOstC1ps2i0SKPIJyaDGMuC/P+JPFQpcaY0al8ph5kZIiY0yNixArgg:Q0nBlA/s2/SKAMa3h/CzUE8TS5fxtFq

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTAyMTQzMjA3ODQzMDExMzc5Mw.GRS-So.q-fGy4OeZA7_se-xUdFVkaPiNxQJFRukyw9Ofw

  • server_id

    1321113521538203738

Targets

    • Target

      Nixware Loader.exe

    • Size

      78KB

    • MD5

      0c3707365415a5dde7293f2109fe0b4e

    • SHA1

      10e64f1087f142bb2e3301d41f5b600933291099

    • SHA256

      0adc04c287413eac1f39fe5abeaed5655c3b74f3ee346646ee2d71fec944f1ac

    • SHA512

      e9b914a6f9b8e434f240ae96072f4bca963bb64e63abcab76a1ecb626bac6cbe6ca79c6eb06872f83a740f7a1ce3eeb6fe44c56e07ba9e7393a1b97581698e90

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+cPIC:5Zv5PDwbjNrmAE+QIC

    • Target

      dnlib.dll

    • Size

      1.1MB

    • MD5

      508ccde8bc7003696f32af7054ca3d97

    • SHA1

      1f6a0303c5ae5dc95853ec92fd8b979683c3f356

    • SHA256

      4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a

    • SHA512

      92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d

    • SSDEEP

      24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww

    Score
    1/10

MITRE ATT&CK Matrix

Tasks