Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 18:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DiscordHistoryTracker.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
DiscordHistoryTracker.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
General
- Target DiscordHistoryTracker.exe
- Size 22.7MB
- Sample260623-wsvvlaey3n
- SHA256 e94d6ad6b5d3f1ad311ed91213ca75637d718cf427bea46fa57b545745c64aae
- MD5 879808845103eb08f487a2d04d0c12d1
- SHA1 3cfcbf72676c0bba06c7bda3d7412e456ab5e647
- SHA512 7f015a0e339994c914c12b8cf3647c0c1fa94196d098ebbc0d2b569ca66c08bc174b71715ce8f1b30b6ca3745a027a35f35283e3b178168521389ca171c480eb
- SSDEEP 393216:oCmXRQhAKPEe2kf4L/GiTG3vhouSARxShGHTTSOgH99eDHjDE9b+IJYnSgVhTGn:o9sEmVncGPSL8DXzng
- TLSH T16837F156E2F900E8D57BC0B8C6574627EBB23855133097EB52A48A692F37FE16E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 2940 DiscordHistoryTracker.exe 2940 DiscordHistoryTracker.exe 2940 DiscordHistoryTracker.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2940 DiscordHistoryTracker.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\DiscordHistoryTracker\Gu7u3dRPuX60vcyH8eLEW5qKivcOdx4=\av_libglesv2.dll
- Size 4.2MB
- SHA256 caff1be1faee32f7c5bfba9162ee617c347aad40772caa9a1aff794e3a191420
- MD5 0c6d7ef9f90b40fe51e67a2ff9f38244
- SHA1 d6cbf5d5b9957028d75d2456f1209b2454072367
- SHA512 b4cf85ea6be1c8528bfa6126a81faf44132b6978a07cf01af729f68807c7db6ae16fe71eb74135c9db9fe7696094d89330a94217c953b2ee5cce9be4a4e33373
- SSDEEP 49152:aYV2dj6IAWlax8aR1MCphVaEoJ9yjo2X8cC8P2B+79IP3aW2NcBVKrf+YQ2CsGV:aYVuj8eW43d2
- TLSH T187267D57B6A500ABC8BBC13CC957960BE3F1F85503A087CB21A8576D6F637E05A7B324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DiscordHistoryTracker\Gu7u3dRPuX60vcyH8eLEW5qKivcOdx4=\libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 a54cfda99ffb965d4daa307c381763051ee638b629bfc0f424feb7a8046a7e36
- MD5 18c3db11db291ae7b7b975eee8a4e381
- SHA1 151d5be933698a611f24a3b20a77f1e7f9c7ac03
- SHA512 c93f2026aababc2fd4e812ab4640f0c783d4c1542a0b91ba600534f36b086b1d577ccadedc5d3ba82084b8e01d57f20c8221271651fd48e997184406d783a696
- SSDEEP 49152:9By4VCDmxqVx/1hlcsHI7woyGYdwENua6m4x:oQkPNuL
- TLSH T1B675AE4AE26A11E9D8ABD074C656840BD3B274420F14DFFF56E08695EF23EF51A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DiscordHistoryTracker\Gu7u3dRPuX60vcyH8eLEW5qKivcOdx4=\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH