General

  • Target

    Iceko.zip

  • Size

    219KB

  • MD5

    818341d44349cd54349be7ca1bf08243

  • SHA1

    1815c67f9b7511a9dd2214957fa1dc8ea99f2f46

  • SHA256

    78292fef9693d1aa8fdb1b3963b5eb939eb969d38ea27716f610400bdf52ee87

  • SHA512

    42e8949f4c2d062241e0ada6afaa32437273f9342ace3df39e802afc1db9d7799cec70c7f42dd904340dc9667ea88c72e9750589667ac54186deefcbe82cad7b

  • SSDEEP

    6144:Gu3uZnmevYZxihD1ZGWJ6NjIIFIYiFkSxHShHaGpq:vYmVrgGESjIIuMn8

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTIwMDM0NDc3MjA0NTQzOTA3Nw.GKoaeE.70adSlciJ3HqOWYdLkWWGIG3v04-MMo7Jfvv_M

  • server_id

    1200336039504511017

Signatures

  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Iceko.zip
    .zip
  • Iceko/DisableDefender.reg
  • Iceko/IcR.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Iceko/Iceko.lnk
    .lnk
  • Iceko/icon.ico
  • Iceko/start.bat
    .bat .ps1