General

  • Target

    qwd.exe

  • Size

    78KB

  • MD5

    33d24b41f83ca9261ca0b3ccf6958ac9

  • SHA1

    7c5706704f6d25defcf21a73cfcf1dc0a4d3a77c

  • SHA256

    677e3f181c2103e53a9700fe162e9d39ab8a43001db4ae444ac45670bf3ac999

  • SHA512

    c68da7679537e8b38732c994a60391f95334ff0d1f09a90da5cc35acdd666b168e20203a2c2e5e635fa4a09cfb1744b99b5c6c561f8cac9adcb9366c9032f669

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+oPIC:5Zv5PDwbjNrmAE+sIC

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTIxMzg2MDU4OTk0MDY0MTgxMg.G9LWzO.om3J5EslAC-fvEPdEqmHkMqOfsLzKjbpsdQNG8

  • server_id

    1213861042640388136

Signatures

  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • qwd.exe
    .exe windows:4 windows x64 arch:x64

    Password: infected


    Headers

    Sections