General
- Target DiscordSniper.exe
- Size 13.8MB
- Sample260807-k4djxaar31
- SHA256 a8074378cc29a31ea31869f57857934bcdf93289d4e67a9ab1daf70d75b331e2
Score
8/10
Malware Config
Targets
-
- Target DiscordSniper.exe
- Size 13.8MB
- SHA256 a8074378cc29a31ea31869f57857934bcdf93289d4e67a9ab1daf70d75b331e2
Score7/10-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target sniper.pyc
- Size 15KB
- SHA256 0fc2faa0a7c13c9f1fe6f54b7a39d1949ec5967819bed1e4824419271d72a611
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1