f2aa1f8532291fead9115b36709f0c566a994be0a9a50af8605b99954ac774e7

Sharing

Copy URL Twitter E-mail

General

Target
discord_voice (1).rar
Size 8.0MB
Sample260819-1w7e1sam81
SHA256 f2aa1f8532291fead9115b36709f0c566a994be0a9a50af8605b99954ac774e7
MD5 9768494fefd4c261b0285f317ff7d42e
SHA1 a56bf318fbae04ada6cc1f4cc4e44aa09f04f485
SHA512 2e7d8b58825930bcc46d7b89ca0471c2d046bee7e6747e7ac7d10cc84daa23455d9d050224e4588bd110f35bd9b7a7e6d4fd99a869944c59ba587cde1c40e9c1
SSDEEP 196608:P479K9e7g1vJ/K3X4bt69b5AZ3Mx8SDQI8PDxrHfoQseVV:Ws9e7AyOtI5yeQrrxrH+M
TLSH
T1DF8633F110E9EBB5B57B2853D796A10F9D9614612C0683D8F32BA222B50F4D63025FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  discord_voice (1).rar
- Size 8.0MB
- SHA256 f2aa1f8532291fead9115b36709f0c566a994be0a9a50af8605b99954ac774e7
- MD5 9768494fefd4c261b0285f317ff7d42e
- SHA1 a56bf318fbae04ada6cc1f4cc4e44aa09f04f485
- SHA512 2e7d8b58825930bcc46d7b89ca0471c2d046bee7e6747e7ac7d10cc84daa23455d9d050224e4588bd110f35bd9b7a7e6d4fd99a869944c59ba587cde1c40e9c1
- SSDEEP 196608:P479K9e7g1vJ/K3X4bt69b5AZ3Mx8SDQI8PDxrHfoQseVV:Ws9e7AyOtI5yeQrrxrH+M
- TLSH
  T1DF8633F110E9EBB5B57B2853D796A10F9D9614612C0683D8F32BA222B50F4D63025FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
behavioral1
- Target
  discord_voice/audio_effects_helper.exe
- Size 281KB
- SHA256 21efd16fd13b066ca3ec34f7f6ee77d8ca520deaca8b53ac68e08609280dcc75
- MD5 a32b777fbc58434c51f3257afb50bdcd
- SHA1 b8e96f93c11b22d643a227f820bb43fae09ef4d8
- SHA512 56ff6a05b3e865478866592f24ce059001e76b805e681afb5ed4e722b1cb014b7fffb64183fb7fd7a4512d1791794aadfcb388b84e92ce84f6e4c516ad4d598c
- SSDEEP 6144:735FSOoQIJiuvicFx8YMYQJn6aOv702wr:TWdHbH8YAZ6HI2I
- TLSH
  T160546D16B68118FDDC6BC03DC2458522F672B8C50B21EAEF0764422A2F67EE15F3CB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  discord_voice/discord_voice.node
- Size 13.7MB
- SHA256 6d2893a0741131bc830ba24d08ba174b1bf0c3ede4511e61104b650778274194
- MD5 47feaf8542fb4d63c0db20eec10f4993
- SHA1 8c38973fa6598fd24c392e8f08f3a7ef3e4f4663
- SHA512 3cd128d00ec4e896f0fb636cd52634331825ae6c3ec920b8abe6240dc4ae127d4cba09255169f5a652d95e1cfdef4f7262723569ba8bdb852ea4327e129af89f
- SSDEEP 393216:9IRuvQ2Gw1LKBqVBg/SctnrED3OYZdx4D3xNJViF4Ke2KxBT:9hcPOOYZdx4D+Sn
- TLSH
  T1CDE66B07F25610ACC85AD478975BA522EA34388E03756AEF17D487752EB3BE07B39F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  discord_voice/gpu_encoder_helper.exe
- Size 881KB
- SHA256 aba5340dc7e2969505bd3600b08d3c1e49f8eebdca9d7c4f8b2b3e9bbbe912d4
- MD5 d6ae6224392f35ab4e2b0f5ec507846f
- SHA1 66a340bcad09a0447fc1148c20c2ad855eb28bd3
- SHA512 2fcde41cad809511ad981c0a6f519959b2667cfb3732e681f4d2911dd3389426d89f505344f6d09d776eaabe8fe1c1ac1ec55e25d8c6bdebb979ad28908ffb96
- SSDEEP 12288:TZHfTiiWEH1Fvl0fVl6fSGSlSQ+naroFbr8pzE+9+Da5v3P5BwXXv:5fTi0HvvlIVl6fSGQSdnYQn8B+u5Iv
- TLSH
  T102153A07F65640DDC46AC13483466232FA75B8890B307AFF5B948B353E66BE05F39B68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  discord_voice/index.js
- Size 21KB
- SHA256 36a33235297af651a231b627ccdd30429485a4985b422ceea98cf73ec988bea1
- MD5 47b8a94db18c4a421556307a86d7b54c
- SHA1 3635c1934ce59d356a9926c084b31b35be04f998
- SHA512 5b38802d330ccddfbe0080826b51fde7b45eca9fe02b23af5bc9da1f36ad804f682a372551738e6f5689e207f857b77f8e10b306311649662540706838f825dc
- SSDEEP 384:aT9Y+iCvG0ZG2XV2dAzNN2qi4EohcTRZW59+ikxfbLr8USy2yVpOC/IvByfj8+91:idiCvGZ7cN2qi4Eohc9ov+ikxfbLYUSE
- TLSH
  T1FFA2C75C36B60015CCB362A3764767069A3E5847290CD6E436EE87862FB1052D3FBEDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  discord_voice/manifest.json
- Size 275B
- SHA256 d1934707a6a1efd0194a821b062095341c4256aa9a35845f2015a3f2b149d68c
- MD5 70f1b5fad9343052e26434493dc17206
- SHA1 d90fd4e8b3cd455cbddb3f259882be1b78e26f90
- SHA512 0719d9ccfd3e2dbd554226944acbfc266474e60ec48ffac1f65bab36a97cfb2f673a2daca43371b641f9216f0ee49e2a9949143054cf1c47fe9737c05eaca1b6
- TLSH
  T130D05E37D8071D47187A89477CB54902F66E57AFC3AE0A1BB63A724D2F39310158DE28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  discord_voice/mediapipe.dll
- Size 8.3MB
- SHA256 373d6ff08e628c68d0b1c91bda9eb0516e757af57ab40cf49bf3fdb5a3fb0cac
- MD5 21382281f4976f595669b8214c3a28b3
- SHA1 15ca7ba2d3218f59c2d590a48c7e2c24d078ef47
- SHA512 8cf5f6bbd598d395b33a44e37b66eb1b0f86db1ba362545d41a4445c0a7783776357b7470b3bb1dbadc601e3f6ed9b714fa2e10239c7ede886c86e5e7bb32b4c
- SSDEEP 49152:qQB1+AmXLzG1G1xhmJc6H/eilGwXeK0VVn4wqubDfO+egj46vXDjGLMUYYbzI4+F:mjsZNT34yY0OMDZAX
- TLSH
  T197969027A2A501ECD17BC079CA97A903FB71741A0370ABDF169186761F27BE05E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  discord_voice/package.json
- Size 25B
- SHA256 4f35fd6a3f2046e09ecc02576752378eeb7cd7b48db490d3358111c27e808866
- MD5 51385db7c06bdcc9e2545b34c8edeec9
- SHA1 443236bded26b7a1f8028c434ecdd760bf66b59f
- SHA512 90d480ee9cdf0bbc7be8ccc51ba3c9713a87c827fd0977736ce79f109d413935faeea78b587a57087832df8111d137758b87f7e672f1f1f022482d0c8446efab
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral8
- Target
  discord_voice/selfie_segmentation.tflite
- Size 243KB
- SHA256 9ee168ec7c8f2a16c56fe8e1cfbc514974cbbb7e434051b455635f1bd1462f5c
- MD5 16db9d4b2d1b11a174af22cb5040817a
- SHA1 1db14d960d6613587955375cfa744d77ea43455d
- SHA512 d48a020c93aa3a074d7fae7b7421cded12e93d0c3b6cb2c97abfe61bd9d6a7c08b435645dfa26820c6dcac3abc238ec496fae8ff29d33f293bb1bd11529ed478
- SSDEEP 3072:FrVwSxKyFKOCc8TYzsoVKm65308kPBFBxlHZtGGeTy5C/gLJVcM8DeHwsdUdo7xz:9Yj6ooH656VLZLUgLy4lUdsrSIIs
- TLSH
  T12934CF5BB380FE31E25FB23091BAEF561A69F72597D0032376A4435D7C91A508E37E84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  discord_voice/selfie_segmentation_landscape.tflite
- Size 244KB
- SHA256 a77d03f4659b9f6b6c1f5106947bf40e99d7655094b6527f214ea7d451106edd
- MD5 7ed7c3b64299722cb31c20008509fba6
- SHA1 969f24cfa88959bfe6d11f66544522b752cd0629
- SHA512 f3054de7338a1e26defa453e0e9d5f7756c25796679c63d3717b30cb3a9c04fffca96b2f6a104ade7a1b02c71fb27304024667337bf8bceb87cb7975d85a7241
- SSDEEP 6144:UWDSpl/AV9N+ZFw7h1kLnGanUL4dnHRln:UcSplxkd1KnFHz
- TLSH
  T16F34D01ABB91EE31E19F9331557BEF852B78F73A82C55B223158036C7DD07508E32AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10