Overview
overview
10Static
static
10discord-im...ld.bat
windows10-ltsc 2021-x64
10discord-im...bug.py
windows10-ltsc 2021-x64
3discord-im...ers.py
windows10-ltsc 2021-x64
3discord-im...ken.py
windows10-ltsc 2021-x64
3discord-im...ion.py
windows10-ltsc 2021-x64
3discord-im...tup.py
windows10-ltsc 2021-x64
3discord-im...nfo.py
windows10-ltsc 2021-x64
3discord-im...fig.py
windows10-ltsc 2021-x64
3discord-im...ain.py
windows10-ltsc 2021-x64
3Analysis
-
max time kernel
96s -
max time network
143s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250217-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
04/03/2025, 19:41
Behavioral task
behavioral1
Sample
discord-image-logger-release/build.bat
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral2
Sample
discord-image-logger-release/src/components/antidebug.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral3
Sample
discord-image-logger-release/src/components/browsers.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral4
Sample
discord-image-logger-release/src/components/discordtoken.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral5
Sample
discord-image-logger-release/src/components/injection.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral6
Sample
discord-image-logger-release/src/components/startup.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral7
Sample
discord-image-logger-release/src/components/systeminfo.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral8
Sample
discord-image-logger-release/src/config.py
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral9
Sample
discord-image-logger-release/src/main.py
Resource
win10ltsc2021-20250217-en
General
-
Target
discord-image-logger-release/src/components/browsers.py
-
Size
16KB
-
MD5
1fa5ec2594e7dc5ba902baa17c26c396
-
SHA1
9cc476e8f5068edde04fb74b8d553b9920bb7e22
-
SHA256
fcc7ce278bc39a6f36772e45ca5a9c52bc1457bbcb451587c8812fe090fe0e37
-
SHA512
57ff299400b36ad38fb04728c6416c3b45decc88f6258a5df66bf6bd388575c7ccee5837e0903f44bfb90ff319a9bf6cee046ea316a8f50f365e9418e888b922
-
SSDEEP
384:ljE+Bs45wvwmzwCN903g6YeNlO3+B73Rk:BE+SYrCN903g6PNlO3+B7K
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737631-513087862-588053281-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3452737631-513087862-588053281-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1188 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\discord-image-logger-release\src\components\browsers.py1⤵
- Modifies registry class
PID:4400
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1188