discordrat | BUILDER_FOR_ALL_TOOLS_ZYRXO[.]rar

General

Target
BUILDER_FOR_ALL_TOOLS_ZYRXO.rar
Size 26KB
Sample240503-1arsfaab98
SHA256 cdb4d8b9fe3826ca23337577db29ac5b635b52fae7bc0645eefe7ce15f60261a
MD5 93d37e5bf256a5be9eb12e7d39c70f9a
SHA1 b039bc4c4c9fef02a394ff84ee300a9d701db639
SHA512 cf40d8a591c3b3e8d9ac2cfa395e8d6f0f13391550fef105ddd2929c6e22181e7eb52ac1146896b6f0d61fdf8c05a3b151e12cdeb671de9d0e9f206a29a6257f
SSDEEP 384:9sYejZmEmE7KXX6cQyztVXgrYINy9HpxDpNYyHkgs+2tjPsQOBNFwFo7y+:9sxl/66Wub6b1s+Szsphy+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzNDg1NjczODk4NjEzMTUwNw.GDwhNG.5j-vB_PJcUvnECKHd_P8s4cqebIgXE-n4QQZF0
server_id
1234856972927631390

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Builder_For_Zyrxo_showcases_All_tools.exe

File Explorer

BUILDER_FOR_ALL_TOOLS_ZYRXO.rar

.rar 26KB
Builder_For_Zyrxo_showcases_All_tools.exe

.exe 78KB

BUILDER_FOR_ALL_TOOLS_ZYRXO.rar

SHA256 cdb4d8b9fe3826ca23337577db29ac5b635b52fae7bc0645eefe7ce15f60261a
MD5 93d37e5bf256a5be9eb12e7d39c70f9a
SHA1 b039bc4c4c9fef02a394ff84ee300a9d701db639
SHA512 cf40d8a591c3b3e8d9ac2cfa395e8d6f0f13391550fef105ddd2929c6e22181e7eb52ac1146896b6f0d61fdf8c05a3b151e12cdeb671de9d0e9f206a29a6257f
SSDEEP 384:9sYejZmEmE7KXX6cQyztVXgrYINy9HpxDpNYyHkgs+2tjPsQOBNFwFo7y+:9sxl/66Wub6b1s+Szsphy+
MD5 SHA1 SHA512 SSDEEP

Builder_For_Zyrxo_showcases_All_tools.exe

SHA256 f40328db6d5644cca78656ea894e5c3d49de5c422701d500a44b2fa2ec27f6c5
MD5 ab84b63f5f159861eaed05e406549ba8
SHA1 8f2dfbfa6526638522f7dd72fe5a7cca627a82e5
SHA512 1d967751f05b24cfca57abd323df247973c3f0758963b3cf583edffcba2a9c15a051a21878ef0d814b0825ab7aff37cf584b1ba38c60e637747090c70368cd91
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing