General

  • Target

    yes.exe

  • Size

    78KB

  • MD5

    a8f2e52f25cb7dba10080cca69211294

  • SHA1

    c3301653484826ca136aa70503c6cb4e2ea22766

  • SHA256

    dab946bb3dc3e9e3ff370125c2b0d25f8411e9f1ae7812f5dac9ad7dc6802b90

  • SHA512

    75c1658007f68be8d9215ec8384ff5facddc583bb940001ddab5f612f17fbc74e10bb96883e77432053045115592e2d0ea0cc4bab64aec245e91fc9457fef812

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+iPIC:5Zv5PDwbjNrmAE+OIC

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTE4OTIxNzcxMjMwNDU2NjI3Mg.GOADfh.N_Kl5HRWZ48cIA6Po60RBP5WZdCg6kUkZi6gWM

  • server_id

    1180920313287016519

Signatures

  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yes.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections