discordrat | HEUR-Exploit[.]MSIL[.]UAC[.]gen-03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e

General

Target

HEUR-Exploit.MSIL.UAC.gen-03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e
Size

78KB
MD5

d40ef0184cd8a7428374f5b9daf94ba6
SHA1

85bd38a2b5a858c6b5e0608b73f66874c4aa9c63
SHA256

03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e
SHA512

37c4fff56bdec5dd7296d6f0dca05c7c66f73f111fd8da47732c5b82bd6faaacb20086eefa319cbbd1d0e10119644444002db3a57ce0f76d7da12eb4857c4e33
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rPIC:5Zv5PDwbjNrmAE+DIC

Score

10^/10

discordrat

Family

discordrat

Attributes

discord_token
MTIxODk2NDQwNzI3OTk0Mzc3NQ.GS7a6G.MN50mEh7UMgOL_rB18LZuCG7dB8Bra64Ihw50A
server_id
1227976374644510781

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Exploit.MSIL.UAC.gen-03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e