Behavioral task
behavioral1
Sample
Damirus_Logger.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Damirus_Logger.exe
Resource
win10v2004-20231020-en
General
-
Target
Damirus_Logger.exe
-
Size
78KB
-
MD5
3fbba0d0ddf0b27cb2870848ed425a92
-
SHA1
6a0624f77d832b5c18449468ec77ddc68621d221
-
SHA256
a4c32a18c068a82aa1c31ae329da38ee37ee45d2ca3ac2b6352e0fc67f92810c
-
SHA512
5c49cefae53b08883a047e08f3aced0903a88ef5b107eeef1749f1e6b749b7753433168c3ba3a9d3d9e8c1aae0f8d01387b78f2e57b0981892e81738a9b16c46
-
SSDEEP
1536:P2WjO8XeEXFV5P7v88wbjNrfxCXhRoKV6+V+NuPIC:PZ75PDwbjNrmAE+UIC
Malware Config
Extracted
discordrat
-
discord_token
MTE3MDg0MjIwNDYzMDE2MzUxOA.GcCpTt.1E-_WBCJhe489svO-s1oVX1xYz1u4kg4ZAv1Qc
-
server_id
1168354244890480820
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Damirus_Logger.exe
Files
-
Damirus_Logger.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ