Overview

overview

8

Static

static

1

Discord.dmg

macos-10.15-amd64

1

Discord/Di...iscord

macos-10.15-amd64

1

Discord/Di...app.js

windows10-2004-x64

3

Discord/Di...app.js

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Discord.dmg
  • Size 187.2MB
  • Sample260805-3f196see58
  • SHA256 ded34f57d5e4d326504d5df2847b18c443890850b52a4d9dcced96cbb18d9027
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryexecutionmacospersistenceransomwarespyware

Malware Config

Targets

    • Target
      Discord.dmg
    • Size 187.2MB
    • SHA256 ded34f57d5e4d326504d5df2847b18c443890850b52a4d9dcced96cbb18d9027
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      Discord/Discord.app/Contents/MacOS/Discord
    • Size 132KB
    • SHA256 3579934b4d60222a31434a93b281db55da83df774f29d89c9476a01b54f65776
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      Discord/Discord.app/Contents/Resources/app.asar
    • Size 7.5MB
    • SHA256 881f77b1a986afc4d76e1de67c15ba9a36c2e80a7ce396bd59eacb63e181a884
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks