General
- Target Discord_Quest_Completer_v1.4.zip
- Size 456KB
- Sample260604-hm5wqaay4v
- SHA256 b2c79cb805a164210ad7f6930e22fe4ec3819807180c1a8072b74c1f28ff2411
Score
7/10
Malware Config
Targets
-
- Target Application.cmd
- Size 25B
- SHA256 4022e59005850fcdaccbbb28e3bcfc78e25d0db9c70a6ca80b6693f8697fc829
Score7/10Executes dropped EXE
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target binc.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
Score1/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
Score1/10 -
- Target util.txt
- Size 302KB
- SHA256 6f80070e39029daa88e0531e504febb1e5d02401d1d15c42d65355c57b641463
Score3/10