General
- Target Discord Username Checker V2.zip
- Size 6.7MB
- Sample260808-bvdc4sfl9v
- SHA256 d416a310f2f49ea24f6323e28ac708255d8e1eb6ec87792070c3baf95ae5728b
- MD5 283f5e8b9ff6bd220b63b807b869ed1a
- SHA1 cf455ebbf946027a85a530fc4a3e112227177dcc
- SHA512 fbfaca7907316091e77ca924cd076edeb57b5f09dc1f6c1024751bb47bd8141c8a6995001513932ced82c514eec46fcad74936ea6377e40e42cf6233ea2f5091
- SSDEEP 196608:5DKbWwL6LIyG+BzFKX/g23ukT4JzSLWn1+bUJqvj+:5DKb8GAzFKXkSKAbtvj+
- TLSH T1506633EF5BC4AB9E270DDD8A60B448E3EFEF74F055E890290F53572F2D325166282A44
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Discord Username Checker V2.zip
Resource
win10ltsc2021-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target Discord Username Checker V2.zip
- Size 6.7MB
- SHA256 d416a310f2f49ea24f6323e28ac708255d8e1eb6ec87792070c3baf95ae5728b
- MD5 283f5e8b9ff6bd220b63b807b869ed1a
- SHA1 cf455ebbf946027a85a530fc4a3e112227177dcc
- SHA512 fbfaca7907316091e77ca924cd076edeb57b5f09dc1f6c1024751bb47bd8141c8a6995001513932ced82c514eec46fcad74936ea6377e40e42cf6233ea2f5091
- SSDEEP 196608:5DKbWwL6LIyG+BzFKX/g23ukT4JzSLWn1+bUJqvj+:5DKb8GAzFKXkSKAbtvj+
- TLSH T1506633EF5BC4AB9E270DDD8A60B448E3EFEF74F055E890290F53572F2D325166282A44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target discord username checker v2/discordv2.exe
- Size 16.0MB
- SHA256 5b86a6e8f279d431a7a72722273771303903ce0640d7e302e465f09f63569c3a
- MD5 885df0691b3bd227546b97d5b66cdf39
- SHA1 0f55f4dae206725b35dccf945ddf75a901a2469a
- SHA512 b606a2bb2aa875230212848afec9db09288eedde3e29bf3b644db2d4dae37aa6706f1cf9a2f648ee459ed5ec080e2b24f0086864d1adaf04b3f4539098533287
- SSDEEP 98304:vSiFMqxsyUXdmE6bkmEJB859/5ut6JG4GReR545U4E6i:vX9SyUXPu5tGfzUx6
- TLSH T1130739A3E89216D4C4EA8274D672417BB7617C491B3833E30690B7205F37BE4DEBAB45
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.