General
- Target Disco.exe
- Size 17.1MB
- Sample260708-pc2vmsgs5q
- SHA256 4d4fd5c5e4b0e71e2e61a156e1aef4253f4e6193618aecb2f3217ed1c0bbe6bf
- MD5 18e2b1f7368db5c04c2a8b08dfcd2af3
- SHA1 f7cac5208c01f84e4768df872fbfd45ddb74b4ee
- SHA512 17421fd95e67d5823e12e5a0319727f140cd435ad7ac956308e6bfff7cb10b640fba93420e61932feae1ad767b62ebd6d0a767f850ababb5f92d18b6f09018e4
- SSDEEP 196608:bKUn5ditKJsp4/FSut292v0wFfvWopmKJ3B//TiA:bK45dtJsp4/F557z/5
- TLSH T104073C4767874DE6DCC63BB4B99B233C4730FD219E690B2BA54881285C533DCAD2EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Disco.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Disco.exe
- Size 17.1MB
- SHA256 4d4fd5c5e4b0e71e2e61a156e1aef4253f4e6193618aecb2f3217ed1c0bbe6bf
- MD5 18e2b1f7368db5c04c2a8b08dfcd2af3
- SHA1 f7cac5208c01f84e4768df872fbfd45ddb74b4ee
- SHA512 17421fd95e67d5823e12e5a0319727f140cd435ad7ac956308e6bfff7cb10b640fba93420e61932feae1ad767b62ebd6d0a767f850ababb5f92d18b6f09018e4
- SSDEEP 196608:bKUn5ditKJsp4/FSut292v0wFfvWopmKJ3B//TiA:bK45dtJsp4/F557z/5
- TLSH T104073C4767874DE6DCC63BB4B99B233C4730FD219E690B2BA54881285C533DCAD2EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1