Behavioral task
behavioral1
Sample
fr4ud doxxing tools.exe
Resource
win11-20240221-en
General
-
Target
fr4ud doxxing tools.exe
-
Size
78KB
-
MD5
5b3689d3dbdb02f217ef687b165ad014
-
SHA1
ef7cbf843ecc5a75290e7d5f6d0e983a1aab7bce
-
SHA256
61bf28a874a46775933565e0de66dff720ff28b94332c75b7fb7889d6d74c888
-
SHA512
f10ccd1878d8dd5c8f4b48767a7ce667e9bc8f55d9b3e6147d1949a4b28e3386c856469bb23fe98067b9cfbae916d247131c6ad923c139672ffe16fa31b86ee9
-
SSDEEP
1536:Z2WjO8XeEXFx5P7v88wbjNrfxCXhRoKV6+V+iPIC:ZZ/5PDwbjNrmAE+OIC
Malware Config
Extracted
discordrat
-
discord_token
MTIwODM2NjY5MzkyNDIwODY0MA.Gjnp7J.LdQ5zf6Oy_KRcdcoR95-sZlPYAc8x7UViOVNpw
-
server_id
https://discord.gg/Dm9UZDZG
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fr4ud doxxing tools.exe
Files
-
fr4ud doxxing tools.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ