General

  • Target

    Pulse.zip

  • Size

    40.8MB

  • MD5

    352b977dd6bd00360e7146c5278ede3e

  • SHA1

    f8f998cdaa201f10996b43bf2acec54841987865

  • SHA256

    9acd8e535349390dc697a12ed6c654a0011b95850f20d6dc91a6c3e7dd0a1374

  • SHA512

    5448b4cc19721a4b30e91573932ed077fe9068de9ae93f20c8f9c4364a295688e6266567460151fb89a5656259ac62ab7b5d8fd8e9f83131f884356ceefa88bf

  • SSDEEP

    786432:jAfxvCCLU7/bjppkLU2eT0fFaDGyf5/wU+HMkbZAH/gkAOtSbWR7Db8S:ixvCCLsbzko2G0NhglHIkCO7kS

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTE5MjYyNjk3OTI5NjUzMDU4Mg.Gkmw1A.uzdxvrJmBbLe9WAmB3tj-e7z3IRRqJBLc79PR0

  • server_id

    1168288064578256976

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Discordrat family
  • Empyrean family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Pulse.zip
    .zip
  • .editorconfig
  • .gitignore
  • .vscode/settings.json
  • CONTRIBUTING.md
  • LICENSE.md
  • Pulse/Puls3.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • components/antidebug.py
  • components/browsers.py
  • components/discordtoken.py
  • components/injection.py
  • components/startup.py
  • components/systeminfo.py
  • config.py
  • interferences.txt
  • latest.dll
    .dll windows:6 windows x64 arch:x64

    b09ce828225e9185fa9d50944444e9f7


    Headers

    Imports

    Sections

  • main.py