discordrat | Sigma[.]exe

Resubmissions

23/04/2024, 21:50

240423-1p1c5acb4v10

23/04/2024, 21:36

240423-1f6hsacb6810

Sharing

Copy URL Twitter E-mail

General

Target
Sigma.exe
Size 78KB
Sample240423-1f6hsacb68
SHA256 3f21d81f46de71ea6660ff852480268cde323ab68b3b449c34a2b18f21e75e46
MD5 a0433989f33346e8cee2eea36071a7c2
SHA1 d46ae970a1e301dbadbb9516967ba5d434858192
SHA512 ec9c36066480a976a3700d7021da37688f1f9a608df1dcf3facbec6077729a310acc5cdac22ec60d566cd627831113ec8bff5492a0b989c1058747eb65492f7d
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hrPIC:5Zv5PDwbjNrmAE+JIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzMjE3Nzg0MDk3NjI5ODAyNQ.GAxEYs.EJ_K9VlQJWrmSf9o3vCed38St3du2Nj0wsFLYw
server_id
1232179070591307896

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sigma.exe

File Explorer

Sigma.exe

.exe 78KB

Sigma.exe

SHA256 3f21d81f46de71ea6660ff852480268cde323ab68b3b449c34a2b18f21e75e46
MD5 a0433989f33346e8cee2eea36071a7c2
SHA1 d46ae970a1e301dbadbb9516967ba5d434858192
SHA512 ec9c36066480a976a3700d7021da37688f1f9a608df1dcf3facbec6077729a310acc5cdac22ec60d566cd627831113ec8bff5492a0b989c1058747eb65492f7d
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hrPIC:5Zv5PDwbjNrmAE+JIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths