General
- Target Discord.Lite_3.1.3_x64_en-US.msi
- Size 19.3MB
- Sample261107-p3gbmax14j
- SHA256 c96f7aea7646cf35cb7db59462894bc0e042ab4f811d662ec184e46bfbc69637
- MD5 df6fa688f18bc5716e1612d3715dbc34
- SHA1 183fb71b67339be26f8ced22e23c065e68bf62df
- SHA512 4d3d9ba2f009d5c4927fe239a6567c9432767eddf120c25eabf5b7d03145c96d315928769eecd28d4f8ff8b5ce4e2f82ae25a3bce09b70a3913723ff6a66e7aa
- SSDEEP 393216:/ALSyXfkHOnJCoURmacJrs/JG08j9yvBQbnKtN5oOrJb:/A+CkHOJCoEmacJrs/MZ0mnKtfXr
- TLSH T1921733277C81E730D50E5C70927DABD82AB93D64AF05A85B2A447736EDF43C0987A4CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Discord.Lite_3.1.3_x64_en-US.msi
Resource
win10v2004-20260911-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Discord.Lite_3.1.3_x64_en-US.msi
Resource
win11ltsc2024-20260911-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target Discord.Lite_3.1.3_x64_en-US.msi
- Size 19.3MB
- SHA256 c96f7aea7646cf35cb7db59462894bc0e042ab4f811d662ec184e46bfbc69637
- MD5 df6fa688f18bc5716e1612d3715dbc34
- SHA1 183fb71b67339be26f8ced22e23c065e68bf62df
- SHA512 4d3d9ba2f009d5c4927fe239a6567c9432767eddf120c25eabf5b7d03145c96d315928769eecd28d4f8ff8b5ce4e2f82ae25a3bce09b70a3913723ff6a66e7aa
- SSDEEP 393216:/ALSyXfkHOnJCoURmacJrs/JG08j9yvBQbnKtN5oOrJb:/A+CkHOJCoEmacJrs/MZ0mnKtfXr
- TLSH T1921733277C81E730D50E5C70927DABD82AB93D64AF05A85B2A447736EDF43C0987A4CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1