discordrat | image[.]zip

resource
unpack001/image/gg.png

image.zip

SHA256 bbd85e8ef79d3ba695a4e291519980ceece622abca282d2630fb5d9c0275795c
MD5 6206c7a5df56e6e4d2ec2c7809cab9fe
SHA1 d47ba203825dec80b52852a6cfdbda8cf8adb464
SHA512 a3a901fb70b5c8f365a4670c5799de77b9804dee1e0ab3aa40f41c142dfd82572f4570602e49f0e03b7cae95c20c88d78dd67379dcc43f9e379d95c69412c8ef
SSDEEP 12288:TvlWo6O6BwFhEYDtBZRCypzy3og+FSI2ZAW0aAAkwv4TZg:TvlsErpEJog+FSHiWpkfy
TLSH
T174F4231DD81030BCF8D44AF4A80DBC5643A849B63C65DFDDA5B5F0A939DAFBB248244E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/404.jpg

SHA256 864a515244da52e91c5c4cbf97aeeaaa5839680813ffbfc086aabee25a05f1bd
MD5 69144c026486c91a81083c9ca35289dc
SHA1 88dd5c64e49616746f69324ce56af9cf49b81c63
SHA512 f909ea0e287956288c31782690967d538258843b512a2be100688caa90ca74f8d79b8a1c4d1f034a21bead6c7ea9cb0af671bd7502fca7d2f3380ef9876e028e
SSDEEP 1536:2UC4Yxn6eeVwsnXV7zWs4n2IiJcJBAQx1I:9tYxn6eeT7qsYrc3KI
TLSH
T18243F191F6A4EA1DE28923B526E0E6C16B4EC1F550C8430BF58EE4553FE929CBC85F48
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/bahgg.png

SHA256 50d97f5e28231847a9b49c0e25eff480abf8724a9d0ca4a77d37154023ee8686
MD5 59b5f7d24385d47e3a9ff042f19da323
SHA1 d1ec9df24d53dab5867e7e698042913b29bfda91
SHA512 cd942702ab5be9cfa4209d7774d0f43f28d0ec8bede045e8406984638294acd62a412c058ddb641f14f72181e03a17622aab7d84f214bb039217298b725c33ba
SSDEEP 384:JvlgRJ1ylFxkAFKa9hdbCgbxJjTut544rPF26RwiAoGrQoEpqMLeb+DyunkD+NoV:MRJGYWxdCg1Fo5BtOoGrkU+kD+ousKj2
TLSH
T179B2E0E9BF71DEB4DD0C5A34E2B865A037645763C51C490E2BD9A3D249ACBC8DE2C10C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/c cool.jpg

SHA256 7a408ed15cdd71909f495fd973267efbf931dab8312b266ed83a4754074582bf
MD5 1c1395aed3079ba2af1974726e7ec18c
SHA1 523b55605ad48e5a6ada36ae8fb784b96e7104ca
SHA512 71426fdfda6adc6ab837d1c96da97af9c5b3ffd711460fdac28ccaac49034e918f7bb9d8130ba2d5195b9eee175703728b58f3b24d1db5bd5df6b96cd2151ce8
SSDEEP 768:v7LCj4jvYlIB5vUyByEYvonWy85iCDmX0bA2HfQCmBmpUpfScois:6kLYubpXBWC85RHfQCCmapfScXs
TLSH
T14FF2F1B50BEBDB75E922727E81F696EBDAC2ED06D22051B33374E12DC9541305DD2E08
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/cs2.png

SHA256 862a47448b4fff26e70171d87afab98f399eb7fbe4a5e833a8335d6ece6ae153
MD5 b1d23eba816b052b12986c0bd5b0030f
SHA1 ea3ac566c8f4eb9961ad17811f1432cd0bf03377
SHA512 abb57fa4eceafb10abb1d44bfb09c7c3e69c7cef78db69ad53000e2123d02fa760a3dc28222f1b4bafd254ffc8b4bca3f85b645a62313c2c36fb81d2d8b329c1
SSDEEP 768:1Ipn5mB0D0uhUu4HT03kywas6j3KBQXknq8Gf065q1bxx59eXwxYKl9XWWFAw:1In5mB0KHHT03kyjjamkHGf5ubFQHgkq
TLSH
T12023F1598E367F4CF7306B3A127D6613F0C9901EE31791D6B269101CAB16EB1988C66F
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/doulmax.jpg

SHA256 1498996046ab6becabf5ab43026336be1bf512851f43f950191dc413d1cc4af6
MD5 c4b65919191cc7cdacde6c466361d7ba
SHA1 abaf62be223a0c69027e63c66d6e3f7f8cf440cf
SHA512 23434e1d4e4be883a01a3876c9858b30b84d77b7952eb4b417dacb5bb12409e9994d0323087439b7238bee86a1f72add3d0d29b08affcfd67232344d61f40440
SSDEEP 768:8qEo9tQ2OYfSK2PMf6eDpRZN0hVLptW5tbq1dcjeCowcDPw:tA6aDHXltWTbq1d9Co0
TLSH
T110F2E0331E271E7DF42C28FB85DA1B01662A1FD4E89076BFA12D4BC054765B93D6CE22
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/gg.jpg

SHA256 0883bcbe173cb4d43a8736aebfcded06c454e0d72e5064fa5508f68e6a6d68cd
MD5 c08349dbae88959d87ca6e0cbac92427
SHA1 07f54457738376b3e2ecebb38413b62daa5c39f7
SHA512 477d6ea38e955a1cd2287f6e76b57b602651809d7d7f26c1cbe4c8eb2c91e0fb25b7f00a2200b6b497bbd751ec4a5c90bf1bae5e71868777f41dfdfba5c09cab
SSDEEP 6144:IoeshVoA6sxPc65y4VbbByKXd41iqptgJLBRYQr7F63:IahqsJnEWi4qpCJVRZlc
TLSH
T1323423279B694D0FC019E770EADE2F7063C96D5C8A47A6B5D0E88C03E5909DFE18E361
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/gg.png

SHA256 f6ef4ea24ee9814d494039d7a138878168efe2b49daf6ea338d4984c99682e1e
MD5 9b13219ec8cf472c06931750db17ee23
SHA1 a44f97f277bc147c2d643d5017ac4f4b3490f122
SHA512 7740c294a209617cdfc2dc428215f1db46cb4c79db77d4f944a3be307cc85cc75c5d975a85ec56f17a79cdae203b36ad7a8aaae19c9ee8a900c0ee6dae90e0a8
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+UPIC:5Zv5PDwbjNrmAE+IIC
TLSH
T1C573B8C877AD8903FBBF5EFD147141524B72BB17E935F68D088C54E611A2B828C42B9B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

gg

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

image/gg.png.lnk

SHA256 fe38cec6165f22873439c7a615dc6cdda4d40918050ed6202dffcfdfb7571ce0
MD5 6a84347e1a2224c2933e8d624002e4a5
SHA1 d9cd91fb3a865f51d72b2fef802be608bf966017
SHA512 89ea7c519adf385e687a668703598514cc32b4701e2c394b2365fe624737fb2290546c22a4bba4f169243962d412eed5454cd8b83b74dac79d2b6f346f50fa67
TLSH
T18331ED1906FC5329E3FB8B7B5A38E2618A32F416DD26D7AE009440890D64F10EC31F3B
MD5 SHA1 SHA512 TLSH

image/jsp.jpg

SHA256 bf9f5e653850a3278cfbcfd826a31cd467613a4d67af125866fd0e0d1ecd5c1e
MD5 e1cc442195e74cfe06e61e44d18dfc69
SHA1 82a96daa1ef42a5ab788d1ecd244f15179288251
SHA512 e09a4cfedf6cc2f79e6dfa5e9757655d6e1f70b44b2eff01a8440ff1b50e855cf461973d9e3624ec6ad5ee1cc58a4b1fdad00a50bc2a799174cd2c41cdf3d2e5
SSDEEP 384:qypRAPzuj37G+u/i40zmdrYs2pjgG02R8Ssk1Pa4DsdQg012DsJbJwo3jb7mp2FC:HpRJfGt/xyhNgaa4ym124Jbaw37TRE
TLSH
T192D2F19B0B801C3E8F77E89303F4827AB24B7B1A894758E9D5796E3842051D5FAB1851
MD5 SHA1 SHA512 SSDEEP TLSH

Password

gg

image/negro.jpg

SHA256 ab2128f10138c6ae3b499350a16fcc1831fe6004a56d6a53f450c3e0a8ec56e3
MD5 28e898dffb3072401075e52b8ca96690
SHA1 40025021ecce653ffe012fb620d0d5c8a6601add
SHA512 e17852b32b09b160a1515eedef6e0e486ccedc2a3147e52099944a2001ddee05e3645541b9f1d30464ff672d381f5704b2131df6f33a1cd9d3ecccf5ec3ec304
SSDEEP 384:qKvYMSS8vqltpBFyc8i4oAF+6taREMFQ/kCZcPGvlmZK+BB:hYMxzlLBFj4E6ta2MFykC2evl8bB
TLSH
T167A2D1950F456818DF49B37841B4024B0BAE9B831F4795B1B51DAFBC933E48E77C4684
MD5 SHA1 SHA512 SSDEEP TLSH

image/niggler.jpg

SHA256 8a82d774635a7c7732137a8ae3c9c6310c2465254128cec19cf06ec4ec3674e8
MD5 3ea1b5f7e1380adcf5c6f66b1fa6cf42
SHA1 b0b996b53d576f695fb0a37f9875eb7af915d3d2
SHA512 3922d6427755d5863c727e065775da091a3ac4513c01a8b568c38df2e0a53ee7e861af19542c25749df7431d012b782ec8cecfceaf265257681c8bbfff1277a5
SSDEEP 3072:mmBqAAl7lpkymFxHOFOzRboUl/zqj1/PD/8uuJJSmh:98AiLk1PzGUmJ/PDhKAmh
TLSH
T17BB312736B48A681C15C57B55DACCA4DE5874E231B398C2BCB8A2D88C53F4B5F139BE0
MD5 SHA1 SHA512 SSDEEP TLSH

image/nova.jpg

SHA256 265e969c4a2f49a724e2af5afa8faa8cc00ea4d545565a949b75ed95785ef3a7
MD5 1c9dbb337bf445e14365e4a3fd8bcedb
SHA1 2669b1db5f3bdc5bf6d4912f04bee895fa461926
SHA512 658f6fc00f43c0a8f4c9f0f349118793e794a845023cf1a371323a87d58f12ec9bd181df506c65d8c691bf6f76197dc7fa30821824dfb5b059d113a498588532
SSDEEP 384:Cwj054ToBBt73iKdNMsB22CbucrmBMl3tLHUDLoNmzGho0WQTQPJMiHt:zQcox73icNMPhqBw3p0DKmKQvJMiHt
TLSH
T1E282C0171FC0460BF935167A74DA8356E331AC30C68F0B98B6352F729B4BAD67788536
MD5 SHA1 SHA512 SSDEEP TLSH

image/vtf.jpg

SHA256 d54b6918ded0cbb22fe38411c650e2104a44a57eed4e2dfad4ed48ef3113fbbf
MD5 ca10ea20ad5c92114da288370c3820a7
SHA1 301fcbc037330674321ebdd250d1de5b889a3862
SHA512 f89c91b38ef7835db219624306c9cbdcedce467bcb390c6ff919381df0d3709a86a6324addd842d8f2adf8e0d92eac149250f7538034cba46ede40f40fd5e668
SSDEEP 3072:d4By9t7kpKjr6kOm7Kid60W9FRsmCWO5Y/mnOF:d4I9tWKjgm7Kid60W9FSmHO5DOF
TLSH
T13CD31353E9C07B47C89E92285C2C9F973B14EEE30ACC455B6B64D9E34B8D1F4232869D
MD5 SHA1 SHA512 SSDEEP TLSH

Resubmissions

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

image.zip

image/404.jpg

image/bahgg.png

image/c cool.jpg

image/cs2.png

image/doulmax.jpg

image/gg.jpg

image/gg.png

generic

image/gg.png.lnk

image/jsp.jpg

image/negro.jpg

image/niggler.jpg

image/nova.jpg

image/vtf.jpg