Behavioral task
behavioral1
Sample
YT+VIEWGEN=BY=TORCH.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
YT+VIEWGEN=BY=TORCH.exe
Resource
win10v2004-20231215-en
General
-
Target
YT+VIEWGEN=BY=TORCH.zip
-
Size
28KB
-
MD5
b8e1c23c8f7221ff6222b8cabccc10ba
-
SHA1
549eae662ef00cd216b9a0634273545c993b5cbb
-
SHA256
7a0a91df54f04ba6f50b2f601f5d01f0fa49c3032cae7ccef864e12cfec6f63d
-
SHA512
ad26417d7204634650d72b6932c7d4296bf4debd8b973638c6a214548eb55cd257b774a2ec88cca87be9950adad5e56ba436b627c3eb6dd160530b2bedb8a973
-
SSDEEP
768:k5lz6yZDgr9OtA8dozh+2pVt0TolbRLULSMmo/:kd2rySqTibRLUOVo/
Malware Config
Extracted
discordrat
-
discord_token
MTIwODQ5ODAzOTc5OTU1MDAzMw.GE8xuQ.x0EreTmg5-6HrRu30wD9YBf2iFaIa50g8bA4BQ
-
server_id
1208497362629173279
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/YT+VIEWGEN=BY=TORCH.exe
Files
-
YT+VIEWGEN=BY=TORCH.zip.zip
-
READMEEEE.txt
-
YT+VIEWGEN=BY=TORCH.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ