General

  • Target

    RShade-Revied.exe

  • Size

    78KB

  • MD5

    99f7f37aaac00176397c7f6482d5947c

  • SHA1

    8dd0ebe1dda019824ec1dd81ae0cfd6d8209b1e1

  • SHA256

    b4817dcad83a97aea6c5d5c261502198670346ed5886ef3d7ee7f36fd4453460

  • SHA512

    83d81c3062ea9158b136a3c8f5e175c64584acaddb054ffecd6971db12f5a95cda65735b1c036212904d4eb5a112ec38e0bc27e67919f9519480d4618597e211

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTE1MjM3MTQ2NjkyMzQxMzU5NA.GrLwKT.-IkptKJlb4jcpQGY_N5k9i1zvvMJcs_XgrSFWU

  • server_id

    1173319707345047642

Signatures

  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RShade-Revied.exe
    .exe windows:4 windows x64


    Headers

    Sections