Behavioral task
behavioral1
Sample
Oxygen/OXYGEN.exe
Resource
win11-20240221-en
General
-
Target
OXYGEN-main.zip
-
Size
28KB
-
MD5
866dc788568230c2dd87fa9346399680
-
SHA1
916629af65bd029b283bcbf7382cc960fb14550b
-
SHA256
b8742c104121b89b3c4500e9eb4ba5da82f3c94b33f7499dd5631391a94e1ca5
-
SHA512
2a9bc94933b935bff073473c399d59f9c67c769a47d0d2b36601f25ea276cad4dc731930a9445031f3fdd660fd1bffada8b25fbea043bebb8a6dd26e3ed367e7
-
SSDEEP
768:Z5lz6yZDgr9OtA8dozkScWvSetkjQeKNy6Ro:Zd2rCSFGQeIdo
Malware Config
Extracted
discordrat
-
discord_token
MTE5NzkyMTQ2MDE3NDQ2NzE1Mg.G10JF-.bNlt2_PKNFUbG2pRSlM23bcrdFtXhvMU_yl7hY
-
server_id
1052631250457866370
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Oxygen/OXYGEN.exe
Files
-
OXYGEN-main.zip.zip
-
OXYGEN-main/OXYGEN.zip.zip
-
Oxygen/OXYGEN.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
OXYGEN-main/README.md