discordrat | fr4ud doxxing tools[.]exe

General

Target
fr4ud doxxing tools.exe
Size 78KB
Sample240308-ahb4vaaa68
SHA256 61bf28a874a46775933565e0de66dff720ff28b94332c75b7fb7889d6d74c888
MD5 5b3689d3dbdb02f217ef687b165ad014
SHA1 ef7cbf843ecc5a75290e7d5f6d0e983a1aab7bce
SHA512 f10ccd1878d8dd5c8f4b48767a7ce667e9bc8f55d9b3e6147d1949a4b28e3386c856469bb23fe98067b9cfbae916d247131c6ad923c139672ffe16fa31b86ee9
SSDEEP 1536:Z2WjO8XeEXFx5P7v88wbjNrfxCXhRoKV6+V+iPIC:ZZ/5PDwbjNrmAE+OIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIwODM2NjY5MzkyNDIwODY0MA.Gjnp7J.LdQ5zf6Oy_KRcdcoR95-sZlPYAc8x7UViOVNpw
server_id
https://discord.gg/Dm9UZDZG

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fr4ud doxxing tools.exe

File Explorer

fr4ud doxxing tools.exe

.exe 78KB

fr4ud doxxing tools.exe

SHA256 61bf28a874a46775933565e0de66dff720ff28b94332c75b7fb7889d6d74c888
MD5 5b3689d3dbdb02f217ef687b165ad014
SHA1 ef7cbf843ecc5a75290e7d5f6d0e983a1aab7bce
SHA512 f10ccd1878d8dd5c8f4b48767a7ce667e9bc8f55d9b3e6147d1949a4b28e3386c856469bb23fe98067b9cfbae916d247131c6ad923c139672ffe16fa31b86ee9
SSDEEP 1536:Z2WjO8XeEXFx5P7v88wbjNrfxCXhRoKV6+V+iPIC:ZZ/5PDwbjNrmAE+OIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing