Overview
overview
3Static
static
3DiscordCha...64.zip
windows10-2004-x64
1DiscordCha...64.zip
windows11-ltsc_2024-x64
1System.Run...cs.dll
windows10-2004-x64
1System.Run...cs.dll
windows11-ltsc_2024-x64
1System.Sec...ms.dll
windows10-2004-x64
1System.Sec...ms.dll
windows11-ltsc_2024-x64
1System.Sec...hy.dll
windows10-2004-x64
1System.Sec...hy.dll
windows11-ltsc_2024-x64
1System.Sec...ws.dll
windows10-2004-x64
1System.Sec...ws.dll
windows11-ltsc_2024-x64
1System.Tex...eb.dll
windows10-2004-x64
1System.Tex...eb.dll
windows11-ltsc_2024-x64
1System.Text.Json.dll
windows10-2004-x64
1System.Text.Json.dll
windows11-ltsc_2024-x64
1System.Tex...ns.dll
windows10-2004-x64
1System.Tex...ns.dll
windows11-ltsc_2024-x64
1System.Thr...ls.dll
windows10-2004-x64
1System.Thr...ls.dll
windows11-ltsc_2024-x64
1System.Thr...el.dll
windows10-2004-x64
1System.Thr...el.dll
windows11-ltsc_2024-x64
1System.Web...ty.dll
windows10-2004-x64
1System.Web...ty.dll
windows11-ltsc_2024-x64
1System.dll
windows10-2004-x64
1System.dll
windows11-ltsc_2024-x64
1WebMarkupMin.Core.dll
windows10-2004-x64
1WebMarkupMin.Core.dll
windows11-ltsc_2024-x64
1YoutubeExplode.dll
windows10-2004-x64
1YoutubeExplode.dll
windows11-ltsc_2024-x64
1av_libglesv2.dll
windows10-2004-x64
1clretwrc.dll
windows10-2004-x64
1clretwrc.dll
windows11-ltsc_2024-x64
1clrgc.dll
windows10-2004-x64
1General
- Target DiscordChatExporter.win-x64.zip
- Size 47.7MB
- Sample260825-d7fecafg88
- SHA256 d9a9e908e693f80c4a49d845bbde3481f788e9749da0e54e231bee3268a86eee
- MD5 8f8568ed65f0faaa1080c1a8fbf2691f
- SHA1 139c525dbde647d566021fb090a335c97b211a3b
- SHA512 f873e2996ba194bf0c7cc57cc489a93c5aad2ebd9e040f190606139fa868779036d091861420ee9e736a01a0659ac7c9d8483e461e9141a943afe49f9904bbc1
- SSDEEP 786432:V6X2AY/rh55OOYStVdJcb3rt8oCIVZUjkFEddGfsu+NwSzBJomYON3Kw//tWVs0:VSFY/rhKGVdJcbp8oCkuYfsu+N5zB6mk
- TLSH T1C3B733EBB859EA81395CF411112449CD81BFAEE578768D8FEC92C2DD27768F1DCB1808
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DiscordChatExporter.win-x64.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DiscordChatExporter.win-x64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
System.Runtime.Numerics.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
System.Runtime.Numerics.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
System.Security.Claims.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
System.Security.Claims.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
System.Security.Cryptography.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
System.Security.Cryptography.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
System.Security.Principal.Windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
System.Security.Principal.Windows.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
System.Text.Encodings.Web.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
System.Text.Encodings.Web.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
System.Text.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
System.Text.Json.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
System.Text.RegularExpressions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
System.Text.RegularExpressions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
System.Threading.Channels.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
System.Threading.Channels.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
System.Threading.Tasks.Parallel.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
System.Threading.Tasks.Parallel.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
System.Web.HttpUtility.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
System.Web.HttpUtility.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
System.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
WebMarkupMin.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
WebMarkupMin.Core.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
YoutubeExplode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
YoutubeExplode.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
av_libglesv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
clretwrc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
clretwrc.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
clrgc.dll
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target DiscordChatExporter.win-x64.zip
- Size 47.7MB
- SHA256 d9a9e908e693f80c4a49d845bbde3481f788e9749da0e54e231bee3268a86eee
- MD5 8f8568ed65f0faaa1080c1a8fbf2691f
- SHA1 139c525dbde647d566021fb090a335c97b211a3b
- SHA512 f873e2996ba194bf0c7cc57cc489a93c5aad2ebd9e040f190606139fa868779036d091861420ee9e736a01a0659ac7c9d8483e461e9141a943afe49f9904bbc1
- SSDEEP 786432:V6X2AY/rh55OOYStVdJcb3rt8oCIVZUjkFEddGfsu+NwSzBJomYON3Kw//tWVs0:VSFY/rhKGVdJcbp8oCkuYfsu+N5zB6mk
- TLSH T1C3B733EBB859EA81395CF411112449CD81BFAEE578768D8FEC92C2DD27768F1DCB1808
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Runtime.Numerics.dll
- Size 98KB
- SHA256 250a65789085b30d8df5e1723f1f14daea85e8c7d79cce6579459c0442cf533d
- MD5 dca7392ec1bff9be991a0f15c21c84a8
- SHA1 4a0d8aa194742a472488e3affaf8f578c5427051
- SHA512 73bd23df5501f3d32fa72f7318543e472b0c2420485f3d3de60736468dd2706d1ddb96ffcfcd116793a3ae241f04a62326e5f90c01afddeab053a7c91de99cf4
- SSDEEP 1536:vuQxQXQR/lbOmTLFm4yDXlKx7nnNOmUWlA50pSmaO8ZP5CAP3AIh:DxpRtxTLFm1Ix7nnNOmM5CN+Z
- TLSH T1AFA317DDA3D9CAA5EF0F8778743A2B294B319907516BF3DA9CC401F10A167AA64047F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Security.Claims.dll
- Size 13KB
- SHA256 a4288543424387801e162835ad88245f34ece24ee11c3053306bad986ac0ecd7
- MD5 e6619c0a4cc5d8db23603792d5b7f3be
- SHA1 d4d30dbde9ad2f3160424c0174eb94e4d58ee3c7
- SHA512 70aab1fad86d566c75caff72b93c0822479c24ec320c503a78a15ca6ed146114ec16397ea6b4930ce6cc71a79ca35674a3a98dad1ea0ffeec7541a18b00bb4f5
- SSDEEP 384:0+ZLI2a2r2gCOUyelVall9AODsoijV1wF96HC6WWLUW:0WHa2rfCO3riTwFer
- TLSH T11D521B1573EC4337C9FF4F3DE8B642410376E621A561DA6D4A98224E9C57B00CBB2B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Security.Cryptography.dll
- Size 218KB
- SHA256 3680d5055d6140330b6ee873de62358badde47c06083f71df8a4266adfdfd296
- MD5 8f18f5e1ae46ec47081d78a72d683bcd
- SHA1 e12a80c0fddf37caf1a5a344caedabd71e6eb009
- SHA512 a0cb0ee6e3c96335efa8c232e9dc10609677f82c1091a25011987ef7640fd209e2bdc62293ba2a94f756f0f6eb6964a1f20eddd319432a77c83516908c6321da
- SSDEEP 6144:F4hbOBRrzXNfTB+GLNBu+oHqi9JvGOiufBfMbw1TCQHA:FaqBlXNVLDu+yqUvGOeI+QA
- TLSH T17E2448287BE84F2DF6EF8B39E1709005867DE486B953DB0D19841AAD1473BC0C262B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Security.Principal.Windows.dll
- Size 49KB
- SHA256 49e0cf027a45ed8ad4327236fab8310cfa155ebec76aeb6b7c8c80ec76d83095
- MD5 f422171468bca726d81b964cbd5c4e20
- SHA1 e73ad81a7f5c2aada6ced667dd2a816057c11884
- SHA512 633a04892f96368c43d64ebeffd0cef9cd576ad9274db6ccd21019a97d3b6f0af7ed000c9d0dcbebb6327df7dcf55da3d2a56eb6a9b031e5efb6aa16f59dd334
- SSDEEP 1536:KjmyjNtjkD0SAlqMFe2VY31TwBQha8rC7:qmyjNdqN31nrS
- TLSH T1C8335A10A3EC432BE6FF4B3CA4F1625B56BAFA531B02EB9E4DB5415A1453BC18621733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Text.Encodings.Web.dll
- Size 32KB
- SHA256 0518b8f8edf9faee1ce4a6a5fa267de664572aab1cc980c7ec3bf496cb7a2b70
- MD5 9072d9b3c26bfdb3c9567a0a4213d91a
- SHA1 a9af4df362a3b33772634d62f097e22e10ca3bea
- SHA512 4c67c7b9cdb644353d687396414800a1b31b321265887cf1a7192989b2761a978cbe7ad94eee0d74e16e38f7cc5b99e04b23dd56f0f4d8942fe9ea9c9f4d5572
- SSDEEP 384:YRuM6A0XiGw0FYuQ+PXu3uCMyHgOViDhST3RBdKemBMMZIb+rjEAE2cuyV/BWr/h:YRV6dRLQlVMmVKuajYdvy
- TLSH T184E24B117BC9D32AFEBE0732787141950379AF55782AEF062DD83A1858737D40B323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Text.Json.dll
- Size 296KB
- SHA256 e820ca337ac08c7088409f464c8343bc87f4ed7404c4eadb56d9510da69fb36f
- MD5 4324299473f3a1f6e55556b9b909cb33
- SHA1 2524ad30395f1a6c6d8ade249ecd549d82d4e949
- SHA512 e5c1fe304f923ea2534dd3868b41f837e7b957910db8a0bed5075dc26c6748fe732d527c9b8c055627f61fd98f769174089656553ca6acb908876ef516faa6fd
- SSDEEP 3072:bpMyAz6BiIS3FK96eLfyV4MsugrY4tebZ8PSq+5k28PucfSxkDMpySDwwwwwwwHW:ntS3oLzyV4wIeb26ijaDwrZgzyVvepe
- TLSH T133545C6063FC4A6BE7EF0734E0744416CBB9B92B7766DB8C950854ED3853BC0A5127A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Text.RegularExpressions.dll
- Size 350KB
- SHA256 d0acbcacd430862a35d2a559a7993a6b63b4fa4575bd645c4adcda74e7f11be6
- MD5 41c969e0cef9f27d2bd17c1005fe79f5
- SHA1 8b937925671d3a9b30bc72b8131cad1d158bad43
- SHA512 e575848a00a1816ca3978dfe6c75f6cd08de5bac918ecbddcbcd2af49e95eaa50e574e7c6bed2f4e0c8a3ad19067cc314ffa441170e8a306e0406a6458ce3009
- SSDEEP 6144:tGFxFgKtFk66dsmUqKVKDZwrI6y0klUku5:tGFxFgKPadsmUCWI6MlK
- TLSH T1C2747D30178C0A22D67F8B37A4E59514C7F99E12A7CEEB854C9830D52E76381F95A3B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Threading.Channels.dll
- Size 28KB
- SHA256 e141ae3f308e226e53318ad57b1965431a29e8ff8f6fa81b0c548a4b99bac38a
- MD5 f13bebb4dc47bf49802dce4c1cb62203
- SHA1 91680914401ff1617481433e7ec72900fab5f51f
- SHA512 c68b1d2129b48cf783df800d378b1d3d1f5fcfe76452ba2233a417b055856dc04ef44d5b377675a5fa2e90810efeda6fa2c261098c42077c74f68093008486b4
- SSDEEP 384:S6hSTrSlH28x7F/ZkZ0ADiEQWGRW3c9MbkyzFAgRMw1tkFDF0E+MjnDF/NiP17CX:N865/LoQtW37Vu4P1
- TLSH T135D22901D7DC1327DFAB1BBBE9B1161406B6EF50A812DF981D8CA6E49CAB70017613B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Threading.Tasks.Parallel.dll
- Size 14KB
- SHA256 660b4928dc662fd4744d127977878401a785570e686dad56a894324916db8868
- MD5 1716a7d7f60801b63f8bed9ec714eca4
- SHA1 32f08ce3723368bb7209d388afc8a23770cfcf66
- SHA512 8312c4b71e3af68b76201e72c2d5f04118667c1277a1877dfc97dd5299a10235ee44f2509facf491d2a04833022cd71c95e7f218084184ef2e821e9fbb211fec
- SSDEEP 384:ocyyRvyjR6j/qdkW1W5FxFYBNXXtHschDClWDJ+W:okRw6j/2kR8N2c7
- TLSH T1FF52D950E3EC4736FE7F0F7EAEB550400AF1EA45A916C63D189C615D18A7B088B71BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.Web.HttpUtility.dll
- Size 11KB
- SHA256 acb13a3be7efc6e247f676bb36080e7d8a41ae5987fcc525f949c8b9e87a17b0
- MD5 e331b90750966d865c00f1fc763879a6
- SHA1 7d4adea51accc139efd3e5173f4356567cd008b4
- SHA512 80b09d00ab2a54dad92cbd11a43591520409a0abe131338a2a2a6ab44b9566ecb10db623c291b64349a31bbd9cd99fb043d6f0631f3709d77e6d83ef238c7ece
- SSDEEP 192:xODMUsylxwwk829DhazVLfo3bwL4tJKOWTL4BUCW:xODMExw5xnapLmwULKOWTL4BUCW
- TLSH T1B9323B14FBD88337EE7E4A725C6343F046B8EF106907DF665894791968322AC0E77B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.dll
- Size 5KB
- SHA256 49a4137ee9fd388373614704b5e7e5d610371106c0595a8dbd37d414891a1bf7
- MD5 d2274b10bf1c362af272777dcf1bf6e6
- SHA1 4c7c0a44c817b132986500de1fab6894438b8291
- SHA512 9287d72d5f370abe99dcbd455905b1a80e8327fc5cde29b514144ff5fa780e3dd6d7f31f697c7825660838a48d83d899700a14d9b20f80f1deaecfb174982bfd
- SSDEEP 48:6QZ6yzpbdiRd/aOKLpTqwNPPDmDg/QyTZLHUnxZWV1KdDhd5WmSJE:Htpbdiza1DmDg/htLGWvMFLWd
- TLSH T1FBB1422093E44336ED7B4F72DDA35A85A7B8BB10DD63CB1D15C5124AAC16A248E31B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target WebMarkupMin.Core.dll
- Size 146KB
- SHA256 d5b79ef282a7810dc8cd620a7c324ac5835fe018669730218a96df38f7de6dc3
- MD5 007d593fa237003d69e3126ef4dfca9c
- SHA1 080a462d5bfd2a2017fe68d7b790e08886079d4a
- SHA512 1c2156f10900bbe9a75751cdf37581c0ca53a979a6a6aac2a5f00f77b01cfdcd33f66f54a42778aab86fd537e77e3d6ebf9e3f8618ecf9746a5fb6cc0e460a23
- SSDEEP 3072:jQvfUubC69FoLZioU/VAqV+VxgswNqQS2bUOBsv4RiIdmt/r/URZ7GnORRKeHU31:knUi/i2b9RtAtr6Z7pKZus
- TLSH T1DFE3E83933F85A2AE6FFC439E57050104AF2B91F2D07DB5D4D0968DA1532B839923E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target YoutubeExplode.dll
- Size 65KB
- SHA256 845312fcd9539ccfca1d4e74d86927c28fd735e94a35b61c4d192a93e483cf54
- MD5 f722252c7a011851aefddd481739a5da
- SHA1 98415d949501c558b6bfd5486bb20a8b28cf0a1e
- SHA512 b846ec6675b3de2b64925c0f2bc4339e3b752a7b4208310723b5cbd561ad43846037e7afa1389113db18e927f3ee296aed2538baf28e2f32ff7ab86d73a647e8
- SSDEEP 1536:0r4XLVqOhfFV70EHqyufDd19Zd4WIcuCGpBJOo:LqIFV75qdr/9Zd4vBJOo
- TLSH T1C063E1149FF64E68E9BA8B3B5DF722A84AB6BF436C72DF0F1551814188033451D22F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target av_libglesv2.dll
- Size 5.1MB
- SHA256 53191a77fe783cd757ca7767077c2a64a662e7043777a5b4ab74980d4a0b73e3
- MD5 e6198925c32669264eb2a37a5c5706bb
- SHA1 f2bad0cfc40bc642dfcd7242c3fcfe736b617eab
- SHA512 d2836c7335e70171d2dc0e143b9752b1d4947d3b6fe424c2078118aeabf12ac008b7be91adcba6e2616e143c5732afa6a0089f412a5e2d97a3ad76aed6c99aa7
- SSDEEP 49152:UrRhIIcDUAsu5h76YosYgIiiHtY+52ZKLArXaqxRyiEIrYeoEFjWhM+/9+XmEFqZ:aiQsmz2ZdKMyiEIrYeoRnL6Uyfq
- TLSH T190467C03F29250DEC41DD278875B9223F635B8450725B6DF26A893252F77FE06B3AB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target clretwrc.dll
- Size 310KB
- SHA256 a5be8e59c1a20c993771744bb36fb987ecd93766c0c6251c2716fff6d9bd70b2
- MD5 92559a0a1927edba39e94d75826a5ecc
- SHA1 302d169783b9363c02a72cfc94835383f576e6b2
- SHA512 e1b3e36e372cf7f7a037f8cdf8a2131d500bc740c0b8ed94e9a80da6aa0aaa2e659019d5956683ccca150157fc113e53fea18d37659db0b005c21abcc6890312
- SSDEEP 3072:LA9vKrcsTZ6y97YugoclWxKgEn49+XK2fyvTnN48:2EAHRfyvTnNd
- TLSH T1056499463BED4409F5B35FB0AAB75236A676BCA52E51C01D2054D22D2CF1F80CE62BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target clrgc.dll
- Size 656KB
- SHA256 d497a976cc2f724abdb77b14b433ec684c07248a95c1b0331eafbb3703407b4b
- MD5 5f7422f860bfe7a5c369d3541baefb9c
- SHA1 94757cd2ee2647e8f11dd86f3068ad68a491efd5
- SHA512 dd89da625b4dbef9ba53a0ebcb1edb4f11e03d518a97a249bcc61dc4ed829af24e57daf6e80e25347da281fc8af226bee5e4221075d5731dda4014a51ea7adb6
- SSDEEP 12288:gUU5hfABEbX+8fZkMEmQ4EQfUsfumYnFhoxb:shEET+8fnEIEqLfumYFh0
- TLSH T1DEE47C2EF39D61ACD567D0B98A677233E7B634091B0179EB47948B246F63ED0673A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10