General
- Target 6892625-discord-logo-icon-editorial-vector.htm
- Size 590KB
- Sample260712-2vbgmabw91
- SHA256 89e32ef57b857cb33bf03397e9e9061af3a0a4c8e323e79a4f92f39c9116ff33
- MD5 e73000412d887c29ef915c0c7d38778e
- SHA1 1d934755a2a0e2119ae462655fa6cfcccd73657c
- SHA512 c2c9c6cd756131310190d2df7a2af7644b17d31f7bc011adb0e288a8dec95f95be2455178f05cc0d2893a97ec13c83b7b6471e2951c1a23f66444099c584dac7
- SSDEEP 12288:TYqIb0L0JZwa1unzW8C06ybPxHY/tdFqSJztHQX:ib0Ijwa1unzW8C06ybPxHY/tdFqSJzte
- TLSH T16FD44E72B1D4053E542B82AEF6D1BA0D6628E003D25A06E9F8FCC5BC8FC7DD19677609
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
6892625-discord-logo-icon-editorial-vector.htm
Resource
win10v2004-20260513-en
23 signatures
900 seconds
Behavioral task
behavioral2
Sample
6892625-discord-logo-icon-editorial-vector.htm
Resource
win11ltsc2024-20260709-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target 6892625-discord-logo-icon-editorial-vector.htm
- Size 590KB
- SHA256 89e32ef57b857cb33bf03397e9e9061af3a0a4c8e323e79a4f92f39c9116ff33
- MD5 e73000412d887c29ef915c0c7d38778e
- SHA1 1d934755a2a0e2119ae462655fa6cfcccd73657c
- SHA512 c2c9c6cd756131310190d2df7a2af7644b17d31f7bc011adb0e288a8dec95f95be2455178f05cc0d2893a97ec13c83b7b6471e2951c1a23f66444099c584dac7
- SSDEEP 12288:TYqIb0L0JZwa1unzW8C06ybPxHY/tdFqSJztHQX:ib0Ijwa1unzW8C06ybPxHY/tdFqSJzte
- TLSH T16FD44E72B1D4053E542B82AEF6D1BA0D6628E003D25A06E9F8FCC5BC8FC7DD19677609
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Pre-OS Boot
1Bootkit
1