0dc8ad34c82d8ddba65eb5aa42746c957781cb023d7b9fdbc8bd32a41a1ad4e0

Sharing

Copy URL Twitter E-mail

General

Target
exe module.zip
Size 12.2MB
Sample260730-wveamaxwft
SHA256 0dc8ad34c82d8ddba65eb5aa42746c957781cb023d7b9fdbc8bd32a41a1ad4e0
MD5 28604775f853815ff09bce3f574e34af
SHA1 6a0d80c73989e5fde08e5b36d9cd68e51c377e20
SHA512 73d19f29067bc42b6e183ee67ea2f8ad818e9018e68db3effe285000f5c0d60064161d5d628a199ceeb0b4e6227bbb8586537ad995309b05ef5d7a1cc2b92685
SSDEEP 196608:lf7MHXWtm9tHEqrXhZ/t8A0GLFiu6TN3wklsvgyVNVvrKY8A4A8qbZzzT7:5MHpSqjhZHlKNNlsHNVv/84vbZXT7
TLSH
T1C8D6334927900FEBDA2967B7F6C2B0E86D72152722A9E8F639F701156471333BF4B211
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  exe module/discord voice for patcher/discord_voice.node
- Size 17.8MB
- SHA256 61795e71867da74457d79fce45b6a5bf9477d9dbb28599b14906c6319352c47a
- MD5 2aff5907e5127ab3e68aa64f289d76f3
- SHA1 405cc2a28e3e25716cb76d75284036d7dfc0e8fe
- SHA512 bd8f743c5aeed02322f32952d530c7b2f6ce287915117eb31b4f2e67d5bbeaf50a321aa67bd5d08e3a06a5860193bcd04b5cf5d43524cbf7578f2d687b032367
- SSDEEP 98304:30R5E3AE5wpzI8jYK1r8a0nmHcpFX35my+gDU7fUUVP41ofhF+WnYwjAL09bGpwY:k8QzqEyHyP41of0M/LVnwiJxA
- TLSH
  T1DA177C0BF29250ACD45AC4B4876BAA22EA24784D437576EF17D487613F67BE07B39F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  exe module/discord voice for patcher/gpu_encoder_helper.exe
- Size 1.3MB
- SHA256 35f9a338b7835dadeba8a736cf420f62af390ec91f18c4442e8a0d241ab8d58b
- MD5 d91025ca634f98489ce18b4367301930
- SHA1 af61e9b9f9c5671da5ded3103cb4fa8f63d1684e
- SHA512 f2f08ceedff37ae03f9cabf95ef3cc8e304200fdc2bcb7ce136aefe083df4a60ddd058a35f82005017bbba0ce6a22dba6cb5e3ae978a3b9447ffcef5feecc5c0
- SSDEEP 24576:4/FBFv+MiRvvc02PUp2Mjcf1Dv8q+qP5jnAxjVN1hzM:MiDvc02spPwf1Dv81qP5jAxjVTt
- TLSH
  T1BD55BE13FA5651ECC06AC13583066632BA75B8890B307AFF57D487352F66BE05F38B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  exe module/discord voice for patcher/index.js
- Size 22KB
- SHA256 263afbd6c5e2bf126fc36b7ce9aa5482648a0b6386f3649c7dbc0d9895b6c1a7
- MD5 a3516d03fef9e976097d4d302181354c
- SHA1 929bf40c889f63aeb8b993efe7d3434a84ba549a
- SHA512 3bd433821a1707a6cc7ed8e8831ae8bb828de363e6e074ca38e2a20b6b97cb4b7e31db3d06adb9617d42d6e71a32d6501debb86a36c8b81ef9f988a902bec1c3
- SSDEEP 384:GVc91zv6mp2ilx872hEEUajTlMjHiv/RZ558elkIAPUk8JliNK44Vl74JGnGoddS:qcnvp0yvUajTlMjHiv5HKelkIAPUHJly
- TLSH
  T132A2849D3A2614158CB293A3B613670ADB3E09672508839436FD87863FB1411E3F7EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  exe module/discord voice for patcher/manifest.json
- Size 242B
- SHA256 38eece999abffb6f3a32a0b4dbc4ff4eb428377d68c28ef7124baf79d50d5e4a
- MD5 02c9143633de9a5f74b5f18c71888967
- SHA1 0f065780bad314fc331d332792aa3c6e00f763a9
- SHA512 7210547d02d3b35aa69083a436acb889d7ff3c9a52f632d542ab0cdc2cf5e587cac3b97c2164efe7deb5522353ffff5c1490c06c4404c920caff91c55826afe8
- TLSH
  T143D0A737DC071C47187A89077CB54402F16E47AFC29E0A1BB539304C2F30300148DE38
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  exe module/discord voice for patcher/mediapipe.dll
- Size 8.3MB
- SHA256 94dde5d96968052d1a43aede924916b42c0af26ffa60078de4c40589ea9b6ab8
- MD5 c16a98c49badf7fad406aa02ed7f6157
- SHA1 c16288bf47355d9e810bf9cb884e78347016f9bc
- SHA512 87c821fa5f5cd29a3aee6b699644c2c13d51c214b20dc65e29ff00dfba1b9dafd0c05855d6988ea4b55867449bd49f79e1f495c1e2f28564668da2ec169d653e
- SSDEEP 49152:GSbYRdgxoJH9xMBmgCxKmG+0gSrFXUefgH2za8zZLN4W7BDPxZgB96MtSX1jV8Gf:Wxg6IlANFX6R2Azy5Es+4LoiKt
- TLSH
  T18D969E27B26901ECD17BD0788A576903EBB1780603609BEF17D18A762F67BE15E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  exe module/discord voice for patcher/openh264-2.6.0-win64.dll
- Size 955KB
- SHA256 2076cb5675ec6c1a4c70e7a2a322552f547b6eeed649d6dfcd9e02a543b24691
- MD5 ce1282f5845f56761954282e4992730d
- SHA1 10098a366090f110be259f2ec845a7d03a222012
- SHA512 a373616d25aa1ef1c4c4947e931c3ade584513144e22f8ed480bd0a0b441a5f0fee11719c6ec4cdc36b2b7a93fa813f7d86b94261350d372b0cfdb7c4fce5d7b
- SSDEEP 24576:UbQvjvrSIPXhK9vm61ziKAHXIjLk9ektNJA1eiO:UbGjvHUACLk9pNJt
- TLSH
  T1A4259E46E7A601E8D87BD0B8C97E562BE7B9304E13208AEB1690C7151F27BE4573FB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  exe module/discord voice for patcher/package.json
- Size 25B
- SHA256 4f35fd6a3f2046e09ecc02576752378eeb7cd7b48db490d3358111c27e808866
- MD5 51385db7c06bdcc9e2545b34c8edeec9
- SHA1 443236bded26b7a1f8028c434ecdd760bf66b59f
- SHA512 90d480ee9cdf0bbc7be8ccc51ba3c9713a87c827fd0977736ce79f109d413935faeea78b587a57087832df8111d137758b87f7e672f1f1f022482d0c8446efab
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13 behavioral14
- Target
  exe module/discord voice for patcher/selfie_segmentation.tflite
- Size 243KB
- SHA256 9ee168ec7c8f2a16c56fe8e1cfbc514974cbbb7e434051b455635f1bd1462f5c
- MD5 16db9d4b2d1b11a174af22cb5040817a
- SHA1 1db14d960d6613587955375cfa744d77ea43455d
- SHA512 d48a020c93aa3a074d7fae7b7421cded12e93d0c3b6cb2c97abfe61bd9d6a7c08b435645dfa26820c6dcac3abc238ec496fae8ff29d33f293bb1bd11529ed478
- SSDEEP 3072:FrVwSxKyFKOCc8TYzsoVKm65308kPBFBxlHZtGGeTy5C/gLJVcM8DeHwsdUdo7xz:9Yj6ooH656VLZLUgLy4lUdsrSIIs
- TLSH
  T12934CF5BB380FE31E25FB23091BAEF561A69F72597D0032376A4435D7C91A508E37E84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  exe module/discord voice for patcher/selfie_segmentation_landscape.tflite
- Size 244KB
- SHA256 a77d03f4659b9f6b6c1f5106947bf40e99d7655094b6527f214ea7d451106edd
- MD5 7ed7c3b64299722cb31c20008509fba6
- SHA1 969f24cfa88959bfe6d11f66544522b752cd0629
- SHA512 f3054de7338a1e26defa453e0e9d5f7756c25796679c63d3717b30cb3a9c04fffca96b2f6a104ade7a1b02c71fb27304024667337bf8bceb87cb7975d85a7241
- SSDEEP 6144:UWDSpl/AV9N+ZFw7h1kLnGanUL4dnHRln:UcSplxkd1KnFHz
- TLSH
  T16F34D01ABB91EE31E19F9331557BEF852B78F73A82C55B223158036C7DD07508E32AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18