d416a310f2f49ea24f6323e28ac708255d8e1eb6ec87792070c3baf95ae5728b

Sharing

Copy URL Twitter E-mail

General

Target
Discord Username Checker V2.zip
Size 6.7MB
Sample260728-vhxe1a1amf
SHA256 d416a310f2f49ea24f6323e28ac708255d8e1eb6ec87792070c3baf95ae5728b
MD5 283f5e8b9ff6bd220b63b807b869ed1a
SHA1 cf455ebbf946027a85a530fc4a3e112227177dcc
SHA512 fbfaca7907316091e77ca924cd076edeb57b5f09dc1f6c1024751bb47bd8141c8a6995001513932ced82c514eec46fcad74936ea6377e40e42cf6233ea2f5091
SSDEEP 196608:5DKbWwL6LIyG+BzFKX/g23ukT4JzSLWn1+bUJqvj+:5DKb8GAzFKXkSKAbtvj+
TLSH
T1506633EF5BC4AB9E270DDD8A60B448E3EFEF74F055E890290F53572F2D325166282A44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  READ.txt
- Size 857B
- SHA256 888d529a82509fab767fc260a6d12660c2e3a63c52721128d6420d7dfe12db6c
- MD5 eef7dbb952d78e2e1fa5c053627336ec
- SHA1 7311dd03a11cfe4e5d8d4ed82e7e57933fdc0ce8
- SHA512 c8369adbd5091ef5fe333da6e1caf0a4a47860f3ad4ccb7cbf6bf384f74b663b80ea6ad8827f6ed68c4b77ca0255aa63a1ea018df28d2feb5c20483bffb57ba8
- TLSH
  T16F11F67752480D6D02F117837450F7F2F7659482A35A07C1755C065C0F1C736967388B
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral1 behavioral2
- Target
  discord username checker v2/bad.txt
- Size 3KB
- SHA256 c75274a386aa936e00778d9e3d712534603c795d487328bf76211e02cb01432e
- MD5 1059cd651980787a059f7549fdcfa1b8
- SHA1 608a24c3400fd8709777c44fa788dd3de7586d04
- SHA512 10317c31ba770ef130a92fe7a0be59efb3c76ed15476e18796ead581dff951863a35545a54d1eeb638cf356a3b48860f69eb2c0c4138ccd8c22e04358c748971
- TLSH
  T1C161323E081432719EDBC89C489DE4F954DAFD512902B721DF642E6DA22CA8C49B157B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  discord username checker v2/config.json
- Size 31B
- SHA256 380113c538317fe7b8740f57863d9657d8f3c1599c51f69d7e51d2ad438dd977
- MD5 d0061f2531c81893baa19e39970f0cf9
- SHA1 bc2f55e01fa5ddd3a16006214b4f392c4b33618b
- SHA512 d05d5941b2b8173fd7839744c3fb05fd8fe522e36067f9004d7d99bb6d8b5d9e9e02b5f5b348e53f79dbafb015506dc804f53544009face2ab7c08e627a3adc2
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5 behavioral6
- Target
  discord username checker v2/discordv2.exe
- Size 16.0MB
- SHA256 5b86a6e8f279d431a7a72722273771303903ce0640d7e302e465f09f63569c3a
- MD5 885df0691b3bd227546b97d5b66cdf39
- SHA1 0f55f4dae206725b35dccf945ddf75a901a2469a
- SHA512 b606a2bb2aa875230212848afec9db09288eedde3e29bf3b644db2d4dae37aa6706f1cf9a2f648ee459ed5ec080e2b24f0086864d1adaf04b3f4539098533287
- SSDEEP 98304:vSiFMqxsyUXdmE6bkmEJB859/5ut6JG4GReR545U4E6i:vX9SyUXPu5tGfzUx6
- TLSH
  T1130739A3E89216D4C4EA8274D672417BB7617C491B3833E30690B7205F37BE4DEBAB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral7 behavioral8
- Target
  discord username checker v2/good.txt
- Size 249B
- SHA256 607e375f82e14e2f41fa0e369d6ba132c77a699499bc313ec39bf4861e7d0968
- MD5 863731ac67e075e9e644f035eb869acc
- SHA1 0ff2286185b2a3e9a4097b986f3c2a7fafed1bec
- SHA512 fab077d165d71be8a1424f6d4572dbb271bc7397665a1d2c9ba9359a16b040016284a0b865ca088b16b57e27bab1d3eef1136f92856f2d48a6509485cb51456b
- TLSH
  T11FD0A724C4E743000843283D0FEDFB5C290559C6D92AC3E25F47534E7336B0A2D31016
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  discord username checker v2/listtocheck.txt
- Size 272B
- SHA256 b4fab82b3758646fb37172c86ae6bb8435e91abf9ee8cb0560a469044d26b466
- MD5 cb65dd41945552bdb45705ae64855ec7
- SHA1 566492124bd14bf0c419feac5bd8fec058835d28
- SHA512 22b2e824ccbb6bc9007e430a824b9defcdbd8326a28664434d5ac164269fb7faf94bca260103a009a00d6a4abbed451571cc7134a536df1ac74eacce3bcb808f
- TLSH
  T124D0EB3EC8392328E0C702043E0BC3CD90E386000033B2208F49002FB440959F332820
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  discord username checker v2/username/discord 3L 28k.txt
- Size 109KB
- SHA256 d6ab86681dbdc6cc299bbf284a0f81e085732c4c319ef8eaf72abf6b3b12b063
- MD5 1275b156d23f8554b1b53fc1e62b783e
- SHA1 d4fae6830f6b650ced307b6098fff67ef5309d7b
- SHA512 c34cf65f89862d8cc031332312c54d04eba47c37966f41227bee8f330d98c796fa0bbbf07e1aa6c842fadfca218f22a9e4f64c9b45cd537be3ca534375b3e7e5
- SSDEEP 1536:0CnX4C1oPCN9GcEEybnd5zsoYY/wMRyj6jP+5qp026UuilITjTloTH6soK946h9q:t4FPaO//vZa2HuilIu3J4RZN
- TLSH
  T1A2B3857A1AF8BBD0AB49D9256194B51DE297281ACFC710F18AD173C089BFF216F7C481
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  discord username checker v2/username/discord 4L 10k.txt
- Size 48KB
- SHA256 5c791c328afd5cb28d42b1d313a34ad9b7ec312ea1311a81c66ab47bf21d1f68
- MD5 901da4f2089613cdfb6e669d2246a8e9
- SHA1 bfee5d8a3dcbdff071e0d9d324b832ccf99e5d08
- SHA512 a5ec35470bdd0058172113104ea4e451337c9181f5ec2f453c0048199cdc6bc0c98d397a73ca4202aa2ec365d57401a84984d8f4d4bd8652a77c92ce19f5f5ce
- SSDEEP 768:19H9eMsZlwHdSJYtd1EgaAb3FUSUz5BdpBOxYloOyN/k4bTeXG8Qw75:TH0MalWfa6VUTz5BdpBOKoWQTs7Z
- TLSH
  T102234C191DAE3BA2C5AF455ECBCED8DE1CC2570726433E1F5D2B290C62860AC95731BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  discord username checker v2/username/discord 4L 50k.txt
- Size 244KB
- SHA256 586936f2666e2f30cd54c2ccecaf21db2d3ef084878574c4de387d63d4576acb
- MD5 4af35e6a0ec43656225f4ecaeadbff71
- SHA1 a7838f683d4ce2f3967ad86775783757661e52ae
- SHA512 6ff272cf31d137150fac2868e46fd7d4572d62541c64cc3cbb56af870fa235088946e85c17107b065c4ce63d8ee3b7be96e85678f18baa66e68a52ebc1ff9b7f
- SSDEEP 6144:3mQsxB/ye0S3ama9Dgi/UHJIoc9In8MECTt6/rBgchwo9T1ucMcO9:3Anye0JmaNWJIoc9yxEA2zWo9pucy
- TLSH
  T1A934BFD870D175B4D6C78E0FD6A8BB72D7BB16320B8E74928A253B580E7301B9F90C65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18