3b21928cea482c74ce6315cde04538998b42534a4602ad690cc076fa32fd101b

General

Target
TrackCord Grabber.rar
Size 51.2MB
Sample261029-w74faad15t
SHA256 3b21928cea482c74ce6315cde04538998b42534a4602ad690cc076fa32fd101b
MD5 394fdc719b113ad9abfa53d5d19d39d5
SHA1 18b29853afed001c72fba8128d14f2e8b8804fbc
SHA512 a0c548e482075a89ec63fad6c4151e6daad8a6e8bd649667d31eddbcf12bbbf00ae7dda30805bd1f184dfb767db18b928f04b8df911bc08d2ef1a96aac51bb25
SSDEEP 1572864:C+qhBOxVgnGWeK7fvn3QhGCQ8jFVLDTVdxW:C++6gnfz6GCfjFVJfW
TLSH
T129C733CEF406B0782FA3FCCD0F2A425DBD41A951DAAA2BC5196885DD16018CCDFD9B72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  TrackCord Grabber/TrackCord Grabber/INSTALLER.bat
- Size 327B
- SHA256 8d7ac081b1e1fac0714e6c9236ae90d9cd118664f66f501e4922b14548a1e15a
- MD5 02f4545ffb34c56ec516c25863f61190
- SHA1 200cac5759cfcd7c05dc364caa53152b67b4c76a
- SHA512 5f1d31638cb75cf5acae86719bc33033c8a452d7fc7cd41d17203c9dc7eeade4549f7e90128a8ac90032f603f618e22a7557708bca4daa172ce92021c12ac123
- TLSH
  T1FFE0263A3922A42C99E0CFE24AB713A23E90A04353214D92218B90B8854B5A3339B96D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  TrackCord Grabber/TrackCord Grabber/PYTHONSETUP.exe
- Size 24.0MB
- SHA256 b5884fa3f05f88bbb617d08584930770c00bbcf675f2865a9161c2358829b605
- MD5 4fe11b2b0bb0c744cf74aff537f7cd7f
- SHA1 b4f5627009f897d3ce9664242e7f7968b55759f1
- SHA512 80f535f7bc5a3d0a7d645c432ec8fdc86474e129d318c474bec043b568d969e989f2d1d3cde955d4316405e2dcce74aa07adc4734756cb833495910f443c3a13
- SSDEEP 393216:eDU6aubdmT1K7iJC6b+dm9kgTWrB3ldBVO9dJiNQbaWd6LwnCtYr6ICEy6uafw:eDUCY1I6KI9kgTiPdjWaypdwxc9Nyyfw
- TLSH
  T19B47333350989036E6E52972B564D170BE2CEA142B2589EAF2C8FF363D714D56BF3312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral2
- Target
  TrackCord Grabber/TrackCord Grabber/Setup Grabber.exe
- Size 10.8MB
- SHA256 03f7986da7b9aeb56e0765bb06163aba356caa0d45fe259247c739c5ab06747f
- MD5 a7bc40d07a99c1e0732216b8f62eb882
- SHA1 86d2ed787ca709b2c531038529e662dd82d05aab
- SHA512 3c297f65f7797e7ea499675f969ab49a975d6033f2680f5395ce8d0eff3b01b8bccd6f9be5a5f4a0ad463f0e5392415a1361309ba6d3e8d29bfa794af346a837
- SSDEEP 196608:Ca85DbJrteoY3pOUpKMZAYZIvf7DfyGR21X5Sp6GemDMPwMpRA+xWhpnPG/26IJd:785vzJY3p1pRrIvf7DfDspfaMPdpRkp6
- TLSH
  T17DB63355E2A11BFAD4F7A23A89C685443B23B83307A8DDDF43A043665F277D0693DE21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral3
- Target
  TrackCord Grabber/TrackCord Grabber/TrackOrd_TokenGrabber-Reborn.exe
- Size 17.3MB
- SHA256 7e25c20c311ca1c0d30ca334e971d0e31563593f7b4db5128a837ea72d0e6e7d
- MD5 6f285a7f9301f8a3e1b649bdb64e34bd
- SHA1 e0fb5a5148ef07b10777b51b6d923d519aea0b47
- SHA512 6717a95996c34bc5d6a4c6ef744da47952453506268f73e1d402d6a20a7e2b8961197dc21271502b73feecf5eda88f46f92f3ac00971e71c5749d310ea518915
- SSDEEP 393216:QOKPvzSvoWpYFxVHFFjXMCHWUjscuIM/PA2w4x/3XvspGEYdEDV83:ZKPvzvGYFrHFFjXMb858/xxX0tDK3
- TLSH
  T1DD07331DA3E041DBE9F25838B6F7C692DA7AF8B20772C6CFCB6462512E130D0493D956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4