bc471da78c7799d4377f59adcfa4fe921b9dfc69d610216807e7fb70a031c40e

Sharing

Copy URL Twitter E-mail

General

Target
Discord-Account-Generator-main.zip
Size 5.6MB
Sample260805-tzkxvscl9w
SHA256 bc471da78c7799d4377f59adcfa4fe921b9dfc69d610216807e7fb70a031c40e
MD5 b7dc6d8f65b49d75a3f819a961ce3d86
SHA1 8ef3285fb58723c17a5cde66a320071aa4cda0ba
SHA512 e89b4022f331d35c637addd7bb379e93ef4e1dea26dd29aba996ecaf683195a599046c3e8070c1ce29ce38f66ef75e6b6193e84c6760d02daaedb8f5ee771e19
SSDEEP 98304:u+dNadkdcV44oXmFzeQmnHPU1NqKoYq4qgboxXXU77ZSPyehUXQ65yHIA72QcB6H:FIkL4oXmFRDn9Q0YXU7l1j0HkYfTiWf
TLSH
T110463319730E7F09DCCCAA65E587B4B47781932778828F3385BCA5D02F1CE917B9096A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Discord-Account-Generator-main/REQUIREMENT.BAT
- Size 136B
- SHA256 96b163d0021bb9293fd39a4a9d0f0dac2d4aa3d06c5bab1b4a0be72c1fad1038
- MD5 fb6ed539bdaa1b3b23ceb8c02efd2a42
- SHA1 f9bfe115e1f24d7bd63c5b70113f32e1bb7adb70
- SHA512 712957e73be5b4e157e9e2c59bf9db40dc4e5a8b7e37cd14708055f62dc9439eb7fc559e9df0972e71b47bfe7ceda980d149b01b26adc31e913d1286607fc333
- TLSH
  T14CC0924F40742AF7FC0E57786C0350C0874060143436306471CF10F96007C04815B347
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Discord-Account-Generator-main/chromedriver.exe
- Size 10.6MB
- SHA256 746a5df195e0908105cc53581f3bed754f09e4009e1cc1474625241d98f9e477
- MD5 57ecb8b1cbd0f207c19fd4e67013006c
- SHA1 456d6cec4d0b0509f50043a27a30a891948b7f09
- SHA512 de99ee5d53a695f32b49ec01b7608c7a7d6d427c68f9546ec8f2e79be3e440015a9a0063754f983e610e499457535c3a7ebe6f593993c2720965724e26f71706
- SSDEEP 196608:HBYKiq1kkRJgGWGFQ+EGIrlpEHQWTPzBIvj+Fr:HNZkjnGFQFFoQWTPzBA
- TLSH
  T180B6AF02FC4230B5DC8E78F2B42DE73E6E29A15B977584D7A5C81CC45FB01D1723AA9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Discord-Account-Generator-main/discordgenerator.py
- Size 12KB
- SHA256 9af2601bc4ff2f4fc4ab0ff82b857ba32401356dbd2961e0edf06ed3da8aacb4
- MD5 d416f4f0b5d081f832ba0be053c8ab5b
- SHA1 dd5a0891d2b3aaec3d0a28df349dcc1e382d2a8c
- SHA512 bf15c34d51e07c8c412a17000248bd5f9ce658d06c3976d0c07e3c842d316810508d5a40d782a84905474cafcfbf35940fcbdf71900a40d3c638ecb34b233bb6
- SSDEEP 192:JBSCJfX+782q/G1bwm8jnyYPXb/w/iJn6P4PCth8VtyTtToEs/PPX8vKIHg0:JUCJv+bCmExb/6MCthGyTtTSvafHn
- TLSH
  T1694284124C0A295A91BA4D6DFC478186F376C6234F392881B5FC412D4FBAD269BB0D7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Discord-Account-Generator-main/src/__init__.py
- Size 37B
- SHA256 78c11259442cddedb130cc3f657916108556ca49911bd34097e95fa6d69f742e
- MD5 3bb2e4780680ab3e4711a4e9b88cf814
- SHA1 449eeb056261e8d12c157c845e69bb9e36876332
- SHA512 45ca53aea0618580c0561ea0691ca1791b1013a1109209314d87fa1ae7ca85bffaf4a761b4ebe8c12a72fdec65e691a35dac5883451cb10dacbdefd8ca594385
- MD5 SHA1 SHA512
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Discord-Account-Generator-main/src/__pycache__/__init__.cpython-37.pyc
- Size 186B
- SHA256 562652f51ff12b04a15aedef0b49ebeab8a8d49aa27cad22f9c0563ae89133fb
- MD5 4a2cd644d1ec5a0d1b40c76402ba7592
- SHA1 9beaaa97d7dac2afb8b011e7183e709fc3b7c853
- SHA512 dbce322206eb3de7953601b9e3ec6bdc7442203091d33065c0cfba858c4119f5b835a4b2d83982605d0a293d657884c2d957e4ad8217b128015f8e8abd207105
- TLSH
  T151C0804389BBD517DC745376A130563025A058D7A73D1053511C02DE3C0DE504DFC557
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Discord-Account-Generator-main/src/__pycache__/__init__.cpython-39.pyc
- Size 184B
- SHA256 61ccf2e7a73d493e70c0b07a829dba651aac6df3ea8269f27762640acb4a5c59
- MD5 a7b71853bceeee9d9b2254035f94ec96
- SHA1 cd851ca8c3028c78f3b7b9309ea914fffdd5d3df
- SHA512 f3a772d29539f8296855adb8a9a8bdcb2f35522c4c1e2fa8583bfdf2ba99eeda24269f448c2c71dc9d23099dfa23e90adce4edec82e417ae28a29f440d0c15e1
- TLSH
  T177C08042995AD417D4B55375613561343EB154D7972E04D2C11C01C63C0DA5009BC115
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Discord-Account-Generator-main/src/__pycache__/api.cpython-37.pyc
- Size 4KB
- SHA256 ff077904e67fbba65ca650565d5a132db67974e5a33c78dc649dc4c5a5e18fe9
- MD5 67601dfd230db75736e91fe4b4a94c7a
- SHA1 740b3770ddc776d7470979760d20de0f50f3bc99
- SHA512 c5a26c44132ab28adacb7e73b2e84aae39f058862862d7feba5937b0be7d98b53277ba30641c50a70c8539c311788850debd20ca6445aee4f050d69d82219cf2
- SSDEEP 96:Jpuh4Ww5q4Ml7GBvgueUP3qLxNq+6QZKsx3uj:Jpfo4q7GBvguFfq96Fj
- TLSH
  T15791409799818D89FEF0F2F934171364835113A7FF89E1A6056DA08F4D4EEC03E26B59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Discord-Account-Generator-main/src/__pycache__/api.cpython-39.pyc
- Size 4KB
- SHA256 821c0c5e370dfd76e06fba36376aea0e3d98988e5d395a7d4543e3ed42120d2c
- MD5 5d6fc792ca92b45efe3075cc25417a2c
- SHA1 8389c231fa45eae572bf8de22ae66e6e26622f56
- SHA512 df290836169642bdcd0c0049c3e6b5861ab9ff4ab17a298b373960cbb6451ad0dc5e03595b243fcd92891a6d495a03d1f09cd660842cf1b91156add3c9c41db9
- SSDEEP 96:XuR4Ww5q4MVHqGBHnuCUPoW9LkslEPq9Os2DqKSYZCh:X/o4qHqGBHnuhnFf3
- TLSH
  T105919792E4C24D89FEB0F2F8B4162324D21413A79F8CE10B0699B04F4D8EEC17A35B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Discord-Account-Generator-main/src/__pycache__/ui.cpython-37.pyc
- Size 2KB
- SHA256 98db9b604b5cc6aa8ba59b046a9786e20433c1b2b41ad421e88c61eb7b4c01ac
- MD5 346daa8a1e60dbeb6e6e1632d698bc57
- SHA1 912b1c998f454f8797596c1e9ade22261c117ca2
- SHA512 9c95971a61b8494047d126880b36d90d973136e422530ed8b0c007cd5946342ed2aaf15174af289262c780941ff25167ab5daab23d8c51d6f8c34656feff41e5
- TLSH
  T15D510FA058E413A0FEE9AE71B076ED1D232647E2E7E80605F4EC78E53FBA900ED505C5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  Discord-Account-Generator-main/src/__pycache__/ui.cpython-39.pyc
- Size 2KB
- SHA256 f251f5d6e1a99b705ecd90cb5e04cd7b7d4ae777df823406c09c633c193f7252
- MD5 43f36437c744a85dce783ae56f2442d2
- SHA1 7412811606918b75416ddffe982ab116b533874d
- SHA512 f923fa76c8e92190ab17bba0fbc1d38a4930878a442e7305cc40f5bafb8362206de2acaa8c0c2126618a9c60e1279408b0c715012c1f42f28958786fdd0bbaf9
- TLSH
  T17751B4B148F017A2E5D4AE3274B2CD1563654396FBF65104F4EC7CE51FBE960CC10584
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  Discord-Account-Generator-main/src/api.py
- Size 3KB
- SHA256 83f415b8222705d133caf900bdbff2d5adf6477e13ea544047f9d4735e9bfb51
- MD5 5b9183366dc54a0f3a5d28d173a64a57
- SHA1 3861f2067990b9fe76a4f2779d6a321b99702875
- SHA512 ec473aa6aaf5eb4b2eb48759ac3b30b34cbbcd332f5e4f7b568f9fd8dab21b61bf54106eb4364167363c235ebac9c71edc198cb7ffb470ae5f0bcb7d1879813d
- TLSH
  T1B1811F505C53ADC69233C2AFB927AE1AE71253139D282403347C609D6FF6C21B6E4EBD
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  Discord-Account-Generator-main/src/ui.py
- Size 2KB
- SHA256 26e2910839fdf73e77fba81f3b61fecc0ed388e337d5033bc690d67967d6c527
- MD5 d08689bb8901052b31173cdea8737e4b
- SHA1 dea0d049fe835a2fbc90714239a647c413b0578d
- SHA512 e4558dfe9e1d0cbd8ff21c1112dc9e73fb450148e2af997271dc0af5ad5e8e2a97a74cb845a2b5ea1f406d808206b5e6e31c696888038f525017552253afe4a5
- TLSH
  T1DD412D7408FA171552EA8C1B7834CD11A32457DAFBF62884F4DC3DD81FBE921CC908AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24