discordrat | 2FA BYPASS-V -3[.]0[.]exe

General

Target
2FA BYPASS-V -3.0.exe
Size 263KB
Sample240308-mt72wadb35
SHA256 e7fca4daafc29ccd460e69ab01d630844509562f8e94ee3d60dd20557d8b6551
MD5 f7ee184d9dfa88e54ffb8cc6c6fb6b9f
SHA1 6d61a3c783228964c9354424b6cff5589eaf1fa8
SHA512 063ff2f744cd2293f4a55639de99b519bdbad03ef7a26a3d26ccff4819902e22931d7481ea4244816060aaac0c9a04e1b54bd09b411a94bd9ae35e0736a389df
SSDEEP 3072:FZv5PDwbjNrmAE+lI+9/jXBxmoGZPov4T2CJHKHfC5r6m:rv5PDwbBr5IG7xxmoaww6CdfU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIwMDAyNzUxMjczMDgzMjk5Ng.GNxPdN.mmAj4OKTCRvwfQo1E7s8bpCk0tDwxGtO3p0Jtc
server_id
1200027337987723316

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2FA BYPASS-V -3.0.exe

File Explorer

2FA BYPASS-V -3.0.exe

.exe 263KB

2FA BYPASS-V -3.0.exe

SHA256 e7fca4daafc29ccd460e69ab01d630844509562f8e94ee3d60dd20557d8b6551
MD5 f7ee184d9dfa88e54ffb8cc6c6fb6b9f
SHA1 6d61a3c783228964c9354424b6cff5589eaf1fa8
SHA512 063ff2f744cd2293f4a55639de99b519bdbad03ef7a26a3d26ccff4819902e22931d7481ea4244816060aaac0c9a04e1b54bd09b411a94bd9ae35e0736a389df
SSDEEP 3072:FZv5PDwbjNrmAE+lI+9/jXBxmoGZPov4T2CJHKHfC5r6m:rv5PDwbBr5IG7xxmoaww6CdfU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing