General
- Target Mr -discord.exe
- Size 10.3MB
- Sample260819-aw9l9steld
- SHA256 78aeff1590d9d9dcdaf23c007cb62fa17269cc5b43da8ba738b0dd28b04c5a07
- MD5 c5c57abc323b2a19fda04ef550bfdbb0
- SHA1 33a933e6dcdb54e8f38beb8b29ec4fa5761eb324
- SHA512 6e32ccaf08be6f1aa083907b8c72352423a6f62af32ac302eff2e1a7d4908b074b53f70f8be14068d41d1f0b0fb85fef72b8936ced0047e3404d16113756ae18
- SSDEEP 196608:ccmgzHDnGCxdGjP5zeMwJTWe5HP9F8SiPTfQfLNap94Df1tw3:cpgbDnGCnGjNeMwBWqHP9F8HPTShm
- TLSH T17DB63385B9D109FBF8D3433889969826EB76B86317F2D0CF067585A42F337D1693A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Mr -discord.exe
Resource
win11-20260513-en
8 signatures
60 seconds
Behavioral task
behavioral2
Sample
virus.pyc
Resource
win11-20260513-en
4 signatures
60 seconds
Malware Config
Targets
-
- Target Mr -discord.exe
- Size 10.3MB
- SHA256 78aeff1590d9d9dcdaf23c007cb62fa17269cc5b43da8ba738b0dd28b04c5a07
- MD5 c5c57abc323b2a19fda04ef550bfdbb0
- SHA1 33a933e6dcdb54e8f38beb8b29ec4fa5761eb324
- SHA512 6e32ccaf08be6f1aa083907b8c72352423a6f62af32ac302eff2e1a7d4908b074b53f70f8be14068d41d1f0b0fb85fef72b8936ced0047e3404d16113756ae18
- SSDEEP 196608:ccmgzHDnGCxdGjP5zeMwJTWe5HP9F8SiPTfQfLNap94Df1tw3:cpgbDnGCnGjNeMwBWqHP9F8HPTShm
- TLSH T17DB63385B9D109FBF8D3433889969826EB76B86317F2D0CF067585A42F337D1693A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target virus.pyc
- Size 4KB
- SHA256 4b2c89b7fcd73f9364182152fe9677c7544477e576ecc354d53ff8f47187f6f6
- MD5 7e601a24953d477f0c7b58fa638736dd
- SHA1 19f84c41e0601f2542de30d18c8f372c63d76c6d
- SHA512 e68a8c253e7ff12a95ec245b570ef05847200a6ee617bf07ded1ad2cda9812ae168df438cab2dc354671ffca39084e27b251fc9feac100fbce32fea36e2a25f4
- SSDEEP 48:ggpQ9um/OdOG3KzW7IXNhixy5VsXOZqLzsobCXIn8y0J3VwUfSY0xMgpXplx4tRP:ppQ72d6zWSNUxQhZqLzywqQMgXpAtwG
- TLSH T1DFA1B793E554005AFE24E1B4E0D7C498B3BB3D937365D325220E42716DCBBA9CF98708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10