<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e" -->

---
title: HTB Sherlock: Subatomic | daily.dev
description: HTB Sherlock: Subatomic is a post that discusses the analysis of a malware written in Electron that targets Discord installations and exfiltrates data. The...
canonical: https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: HTB Sherlock: Subatomic | daily.dev
og:description: HTB Sherlock: Subatomic is a post that discusses the analysis of a malware written in Electron that targets Discord installations and exfiltrates data. The...
og:url: https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e
og:image: https://api.daily.dev/og/posts/1Ly73Ra7e.png
og:image:alt: HTB Sherlock: Subatomic
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# HTB Sherlock: Subatomic

**[0xdf hacks stuff](https://daily.dev/sources/0xdf)** · 22 min read · 0 upvotes · 0 comments

## Summary

HTB Sherlock: Subatomic is a post that discusses the analysis of a malware written in Electron that targets Discord installations and exfiltrates data. The post provides information about the challenge, the background scenario, the questions, the tools used, and the analysis processes involved. It explores file metadata analysis, unpacking, recovering JavaScript, and analyzing the JavaScript code. The post concludes with the primary highlights and infected files/topics.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://0xdf.gitlab.io/2024/04/18/htb-sherlock-subatomic.html>

---

Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware), [#discord](https://daily.dev/tags/discord), [#electron](https://daily.dev/tags/electron)

[View this post on daily.dev](https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"HTB Sherlock: Subatomic","url":"https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e"},"datePublished":"2024-04-18T10:32:00.069Z","dateModified":"2024-05-09T08:43:33.910Z","description":"HTB Sherlock: Subatomic is a post that discusses the analysis of a malware written in Electron that targets Discord installations and exfiltrates data. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c4c95ef5ac38f0a41b953f30c9f7bbd6?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c4c95ef5ac38f0a41b953f30c9f7bbd6?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"0xdf hacks stuff","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"0xdf hacks stuff","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/16cdada70d5f4fac8b588c53bcf005ff","url":"https://daily.dev/sources/0xdf"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/htb-sherlock-subatomic-1ly73ra7e","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,malware,discord,electron","timeRequired":"PT22M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"0xdf hacks stuff","item":"https://daily.dev/sources/0xdf"},{"@type":"ListItem","position":3,"name":"HTB Sherlock: Subatomic"}]}
```

