General

  • Target

    Discord-RAT-main.zip

  • Size

    526KB

  • MD5

    b21a161b28e3b4b56fc576b37d64d64d

  • SHA1

    61d9582b2a590981ee91c6ff243548fc161760fa

  • SHA256

    0a5ba81dd4a1ae8e12ad6259a9466e8d7fe92fc0ab3d2e764026ad3d9e4865ca

  • SHA512

    a27b952cf0f76633f601cdbef802acc232ddccdb0fdaa4cad648cb3000cf73fb61c8dc006075854633121a421bc06ad579868ead89e1d043734f9e5dbab02d47

  • SSDEEP

    12288:N8K9G80iPAi52M7zIDBrqAItEGN61HJpA118J7rYl:NfvTbkrqAItD6b6D8J7kl

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord-RAT-main.zip
    .zip

    Password: password

  • Discord-RAT-main/README.md
  • Discord-RAT-main/Zenny.py
  • Discord-RAT-main/build.bat
  • Discord-RAT-main/install.cmd
  • Discord-RAT-main/obf.py
  • Discord-RAT-main/requirements.txt
  • Discord-RAT-main/upx.exe
    .exe windows:4 windows x64 arch:x64

    Password: password


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections