General

  • Target
    DiscordSetup.exe
  • Size 117.2MB
  • Sample260517-txvpaaey9p
  • SHA256 0c7952aa2b24d6902803943451c16734a53b17007510e5c970793a0cb420edaa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      DiscordSetup.exe
    • Size 117.2MB
    • SHA256 0c7952aa2b24d6902803943451c16734a53b17007510e5c970793a0cb420edaa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks