Behavioral task
behavioral1
Sample
Gra-main/Gra.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Gra-main/Gra.exe
Resource
win10v2004-20231215-en
General
-
Target
Gra-main.zip
-
Size
28KB
-
MD5
516a581cddd98f27bc0cf3ca5585994d
-
SHA1
9c6120486c95c86ae84be3fc2e9a99a4f49b3ee5
-
SHA256
461088603809cf72307304772f4b5be8be30d4c43b31da269dd6d92ee0066fc0
-
SHA512
81d3db329bc6853999cec113161232deb7ed1f959fcc10173367aa2c4e750f06705150caf457ecbefca7ec823192b3c316bb869ab1609fc0ae4e618d1b81ef25
-
SSDEEP
768:dJtQIrogIzFapad2F9SCjoQzK9QhEP79x0Qbv:dJ284w9SCZET7f
Malware Config
Extracted
discordrat
-
discord_token
MTIwMjk0NzIzNDIzNzI1NTY4MA.Gp5pkC.q1ZjpfmKXMohi-vnvxKOvVWIVFPYZ6QL3bBK1k
-
server_id
1202946382030442547
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gra-main/Gra.exe
Files
-
Gra-main.zip.zip
-
Gra-main/Gra.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ