9b5738d12667752c27084a931de0993f85622fd89b4c9cd8620e5824cc7e7cc9

Sharing

Copy URL Twitter E-mail

General

Target
Dual-Discord-Windows.zip
Size 314KB
Sample261029-vceb8sds2s
SHA256 9b5738d12667752c27084a931de0993f85622fd89b4c9cd8620e5824cc7e7cc9
MD5 6455a1fe88395cfb7aecf388d9e88d18
SHA1 da018c14c8107bcd95de5a4032a9b75be30acbaa
SHA512 ff163a28bb65eaea01948be1450ca2e9306f6a25d94283908685a49b323e2b6b5dfe176410d2f139724eec398236ff8dadcec4b641cca36baca9bda8915356a6
SSDEEP 6144:eweC7SynVGrUlz3/kbnnrJKURqY4ZCi5C29X+RgRnWNvY5rKfzgz9dd/T5Rjfsql:vWynVGolzMnn1PRqdCe9IgUBs/dF3Fl
TLSH
T17F642301057A5F92D66A1E97460BA197C1CA9353A0ED8C00D70F4B1B347E89BF65FCBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Assets/Discord.svg
- Size 779B
- SHA256 c04059c1d13d99239ebd0b7df807e8c3d2f46439bd18a70c5fd3a0631bd7b310
- MD5 5d3e78596880be7c86c02cd60b700421
- SHA1 426b1529d720c605077816828fb370bb4a526d02
- SHA512 d8e91e9ac5ff74a65960efca7f3bf9a9ccc744bd8a07b757801796cddcbeceae21fbedbeb80cc90442da4c0c40612af2427a1895d359acdfaf56120093805658
- TLSH
  T1AA018919E7A2553CCC6507EE55662970389C519DB0C4837CC1E8DD70B5838E8A2E89D7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  Assets/Dual Discord.svg
- Size 1KB
- SHA256 5de5d6be2dce4778bec9ce21625dcac7d61f9d4b87e521033d7758066f2282d1
- MD5 b35fd5905c8cce64c1d8861ada1e05df
- SHA1 cc89db1930506a2566a20c8eec27433495fb462e
- SHA512 c5a1f6ad87063920106f169fb5ef0ed5abf0a8188f453590d8a642dba4cfb27cbf1f734ecda682bd040a5ca836accabd479444c2d6581cfd4e50551d008ba955
- TLSH
  T19E210C15E7D1102CDF31069CA3913CB4384EA08EB1C94328F2A4A83639265CEA6FF9D7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  Dual Discord Updater.exe
- Size 21KB
- SHA256 f79dac1e415d073e59371dd9da7f2f64ebb110975b4eec2958796afd7be099c7
- MD5 3f1b8e9c795b6fd42a068d1d0811d559
- SHA1 87fab4a83803ab61b83f6f03ad3fa0098e2bece3
- SHA512 767a9407f4971523939062033d581233a2d548a26c03e9c4f7e8e66091eb0b8b59d73522e96d02ae0a2f83095e9c6fd03aa99313aff29ca419ccc77d8cccf432
- SSDEEP 192:EmWAbJRm3FbwWMiiuMMwAlwoqixvxDVuCxEYER9585aBaq98Ky9FS/f0B32anOCx:EmM9iuZVwLMvxJxEYERsap9lysf0wJC
- TLSH
  T1E2A2A21873E8C758EABF2FB969B152100675BA57AD31DB2E0ED400AD0D32B54CD74BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Dual Discord.exe
- Size 326KB
- SHA256 500132345f1e2525c791e7853ce2b0297a607bc168d0145330e8135584deab33
- MD5 76cd923903f4f5151ce84cf9a0340944
- SHA1 43ff7ce3bd33e6cfa24ce4fb72916caf178153aa
- SHA512 17f9235f3f4921478966372c543c2fdc028bd4c3bab328590b58b2fe74f5b701d8e6150cf629722444c8a9f2deaa7297c39593b1c211ac23b407bb85f2c740e2
- SSDEEP 6144:W0CLxj19tJbSufAQNeDE9VAzKWO6tyO7zQ:DctRSufz58KWRtx7zQ
- TLSH
  T11A64165963F94654F6FF6FB8A97015104B3AB95BEE7AD60D069080CE0E32B40CC6A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral7 behavioral8