General
- Target DiscordOptimizationTool.ps1
- Size 123KB
- Sample260723-yf88kawbmd
- SHA256 be5f19bddfbc2f75c46fd8ba9e0425be7b2190b1b96bfdbd37a07dde682f1d58
- MD5 af17c6b6fb83ac0b4bb77ae5c2993e22
- SHA1 a776bb006d0690896ace4eb2f21011780b4c3815
- SHA512 49fd50bf4496d483203ea1e6c3c0a873f99cae9d4141854bb0740513f98aaf6d1136893e94cfa5d099488915601707b3b02b5e34edcea40226cca1965469b90b
- SSDEEP 1536:+E+VSwrYNt4wdn0SJ3KeKCTD907llPjdWS7t6Rcj5o2/HGRGJSSrL:+EjwrYNt4wdn0SJ3J9UeqGo3
- TLSH T1B0C3A595B0F44A70D2F74038DAB27881AE1A10B783290594F3DE63B61FA5C6705F7EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DiscordOptimizationTool.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
DiscordOptimizationTool.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://raw.githubusercontent.com/insovs/discord-debloat/main/version.txt
Targets
-
- Target DiscordOptimizationTool.ps1
- Size 123KB
- SHA256 be5f19bddfbc2f75c46fd8ba9e0425be7b2190b1b96bfdbd37a07dde682f1d58
- MD5 af17c6b6fb83ac0b4bb77ae5c2993e22
- SHA1 a776bb006d0690896ace4eb2f21011780b4c3815
- SHA512 49fd50bf4496d483203ea1e6c3c0a873f99cae9d4141854bb0740513f98aaf6d1136893e94cfa5d099488915601707b3b02b5e34edcea40226cca1965469b90b
- SSDEEP 1536:+E+VSwrYNt4wdn0SJ3KeKCTD907llPjdWS7t6Rcj5o2/HGRGJSSrL:+EjwrYNt4wdn0SJ3J9UeqGo3
- TLSH T1B0C3A595B0F44A70D2F74038DAB27881AE1A10B783290594F3DE63B61FA5C6705F7EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.