Analysis
-
max time kernel
14s -
max time network
17s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-en -
resource tags
-
submitted
04/03/2025, 19:41
General
-
Target
discord-image-logger-release/build.bat
-
Size
14.0MB
-
MD5
ef8beb81c6fa2aaad4a314be361292ce
-
SHA1
7b7296096931ac5d62081cc91ead8afd2346e0c7
-
SHA256
6377476be087b6911f24f93a601fd8f46461f52815ec27f95371c8418c385377
-
SHA512
8ffa18e66e4e8a3a23eb7c2375fa6b25aab90da3265f35d56ea9965f8d2c89a988052bbd0e05c0b3b3c124cb5e9f47b0b6ab5ea0df3b880d449fd3ff2a25767f
-
SSDEEP
49152:Lhha5TtF7ZXKxZvLjnrt64H1eGHrWT7xdJ11ar07nqcBIL/ULWorCWmZ9vXEdQm/:E
Score
10/10
Malware Config
Signatures
-
Seroxen family
-
Seroxen, Ser0xen
Seroxen or SeroXen aka Ser0Xen is a trojan fist disovered in late 2022.
-
Drops file in Windows directory 2 IoCs
-
Runs net.exe
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\discord-image-logger-release\build.bat"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\net.exenet session2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 session3⤵
-
-