Extracted

• • Target

    discord-image-logger-release/build.bat

  • Size

    14.0MB

  • MD5

    ef8beb81c6fa2aaad4a314be361292ce

  • SHA1

    7b7296096931ac5d62081cc91ead8afd2346e0c7

  • SHA256

    6377476be087b6911f24f93a601fd8f46461f52815ec27f95371c8418c385377

  • SHA512

    8ffa18e66e4e8a3a23eb7c2375fa6b25aab90da3265f35d56ea9965f8d2c89a988052bbd0e05c0b3b3c124cb5e9f47b0b6ab5ea0df3b880d449fd3ff2a25767f

  • SSDEEP

    49152:Lhha5TtF7ZXKxZvLjnrt64H1eGHrWT7xdJ11ar07nqcBIL/ULWorCWmZ9vXEdQm/:E

  Score

  10^/10

  seroxentrojanquasardefense_evasiondiscoveryspyware

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Seroxen family

    seroxen

  • Seroxen, Ser0xen

    Seroxen or SeroXen aka Ser0Xen is a trojan fist disovered in late 2022.

    trojanseroxen

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Hide Artifacts: Hidden Window

    Windows that would typically be displayed when an application carries out an operation can be hidden.

    defense_evasion

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    discord-image-logger-release/src/components/antidebug.py

  • Size

    11KB

  • MD5

    26435fe69fcfe6322679c9df730cd0b0

  • SHA1

    95a305df9fae655cc4b34eb0d5cad8848a4c9100

  • SHA256

    101b5276bcaae253319cfc1f0f6b6a1688d9286c7852f8e12d00c698b2ae117c

  • SHA512

    26e7750c235cfc734d86502f85f1620c4698bde6e377a2264bddd3017bb8891110e49ead665b59330666d2dd4686c8e657fb080554905dbb9976c8846781c963

  • SSDEEP

    192:0PRZOKV83Gsn8ZBwh9JYmypzrKU8zrPsR0TtsBWaOJjd5vpV5M7/V/c:0ZTd+nJYJzrn+rgeeWaOJjd5vpVC6

  Score

  3^/10

  discovery
  behavioral3behavioral4

• • Target

    discord-image-logger-release/src/components/browsers.py

  • Size

    16KB

  • MD5

    1fa5ec2594e7dc5ba902baa17c26c396

  • SHA1

    9cc476e8f5068edde04fb74b8d553b9920bb7e22

  • SHA256

    fcc7ce278bc39a6f36772e45ca5a9c52bc1457bbcb451587c8812fe090fe0e37

  • SHA512

    57ff299400b36ad38fb04728c6416c3b45decc88f6258a5df66bf6bd388575c7ccee5837e0903f44bfb90ff319a9bf6cee046ea316a8f50f365e9418e888b922

  • SSDEEP

    384:ljE+Bs45wvwmzwCN903g6YeNlO3+B73Rk:BE+SYrCN903g6PNlO3+B7K

  Score

  3^/10

  discovery
  behavioral5behavioral6

• • Target

    discord-image-logger-release/src/components/discordtoken.py

  • Size

    17KB

  • MD5

    c3d9cbff92171f3004bb29fc5c8e0d49

  • SHA1

    972e9a36b103a7c41a26d7f1817ffeeff8dbfb3c

  • SHA256

    18df4cedcec576281fa110f1597b8c300a6d8915fb34a05616b92ce00a1108ce

  • SHA512

    3ba2c6a271cec1b7988f39aa43358bb2fdcf7581dfbbca55adc568595995a1388b53a73279833fac747775304d6d58a98b02830082d164ead89cb1a23e3e7de2

  • SSDEEP

    384:ig9WPIDbhMUN7Qr4cq4cn6vPuk6ii34zSJPuE8q7rqLFBISJ:4Iz7C4F4o6XuVii34zSr8cr8vpJ

  Score

  3^/10

  discovery
  behavioral7behavioral8

• • Target

    discord-image-logger-release/src/components/injection.py

  • Size

    2KB

  • MD5

    1bfaa460966bb67499e24c44e2ae4f3f

  • SHA1

    d79d21cd4518324d0c59fa6e183bc91df1c08433

  • SHA256

    a9d1ad9132081e78a68e9bc71d315b74b4005f67e2667dc933db2be79e297e6c

  • SHA512

    6e1fe9f8a5359abb7409f5b6177908968d5714dabb6e647b7a63c88ae02f06d7c16acb13895d896688ca4558ee64f2f80f2b02ec37879bd5b4b4bd7b5c66221f

  Score

  3^/10

  discovery
  behavioral10behavioral9

• • Target

    discord-image-logger-release/src/components/startup.py

  • Size

    1KB

  • MD5

    d17d405ca05de43451c90ed876382851

  • SHA1

    5d79d59b7c7d84da78b16c3b11ccc329a85974c6

  • SHA256

    e93db849ec64a2c100f7d07bb1267edb96177b4097573796213fe19623b85e57

  • SHA512

    7e2f8325cae28528d84fe1967ded6375d8b581d99a93d5b2dbae8f7a7af03c60cadacd21bd0d29771ccb0dc438e5aac30321f251db44124ab841f267a0ff887b

  Score

  3^/10

  discovery
  behavioral11behavioral12

• • Target

    discord-image-logger-release/src/components/systeminfo.py

  • Size

    6KB

  • MD5

    2737cd3bd851c13c1c5c651e045e75d7

  • SHA1

    828797243a9051d1461abebb90e162bd192f2c8a

  • SHA256

    6689a267860ff5972229c33934af6356b4828b05ae214d2024f62bd113916a4a

  • SHA512

    01d7b0e9c77585e08516c2443797f77c45db861a23f38fccad80036fe3f3ba270add2946317ef5405c608c2f8628910cf38c511cc8d7e94987730e3fe8f71e10

  • SSDEEP

    96:o62a5Q8kjqXmBHyCOMLdpvlGa4sVV2iHxhwqf+zadcTP9eTnSIf:PQRy4Tka/T2UIzaaL9erj

  Score

  3^/10

  discovery
  behavioral13behavioral14

• • Target

    discord-image-logger-release/src/config.py

  • Size

    197B

  • MD5

    f9db0f9a37e5d0b737dd22c3a0473d6d

  • SHA1

    21b489d27337761e2dd5d6c50f4114ad73777800

  • SHA256

    dc3606aa2b6342da0fe23a0a5859cf2f2be3d4bc0ec49f0dd4c79201db68c541

  • SHA512

    12b32a522d848c76b984182f9827d22aea2e7c282b0f03db7b5d78e121157de6b67ee0e6031a44067c59efa146f1d5515514f9e27232778a56720582b7ec7d1d

  Score

  3^/10

  discovery
  behavioral15behavioral16

• • Target

    discord-image-logger-release/src/main.py

  • Size

    848B

  • MD5

    c7e2a6f36eead941802e707eb246da84

  • SHA1

    4406272e8c7a9b8cb5684373c43f3368b2cb44dd

  • SHA256

    eff558ffa171814712d1605c72fe8eba833f1682ef7efc8285dcf5303f4c5f41

  • SHA512

    a6191c28c66c9c33d7bf070b36b5cb6ace45e06593cf4368cfd60e10a28bc846100be7efa025e1e12f5b4c3e0217ae5ec185142d1a4ea5db7aa1a5d585afdbeb

  Score

  3^/10

  discovery
  behavioral17behavioral18