General

  • Target
    DiscordSetup (1).exe
  • Size 102.3MB
  • Sample260709-bh331acs4w
  • SHA256 85060117d7c75378fcbf8b3824e79549002bc5298ae46fcaa2524c83c476596a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      DiscordSetup (1).exe
    • Size 102.3MB
    • SHA256 85060117d7c75378fcbf8b3824e79549002bc5298ae46fcaa2524c83c476596a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks