Behavioral task
behavioral1
Sample
Builder_For_Zyrxo_showcases_All_tools.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Builder_For_Zyrxo_showcases_All_tools.exe
Resource
win10v2004-20240419-en
General
-
Target
BUILDER_FOR_ALL_TOOLS_ZYRXO.rar
-
Size
26KB
-
MD5
93d37e5bf256a5be9eb12e7d39c70f9a
-
SHA1
b039bc4c4c9fef02a394ff84ee300a9d701db639
-
SHA256
cdb4d8b9fe3826ca23337577db29ac5b635b52fae7bc0645eefe7ce15f60261a
-
SHA512
cf40d8a591c3b3e8d9ac2cfa395e8d6f0f13391550fef105ddd2929c6e22181e7eb52ac1146896b6f0d61fdf8c05a3b151e12cdeb671de9d0e9f206a29a6257f
-
SSDEEP
384:9sYejZmEmE7KXX6cQyztVXgrYINy9HpxDpNYyHkgs+2tjPsQOBNFwFo7y+:9sxl/66Wub6b1s+Szsphy+
Malware Config
Extracted
discordrat
-
discord_token
MTIzNDg1NjczODk4NjEzMTUwNw.GDwhNG.5j-vB_PJcUvnECKHd_P8s4cqebIgXE-n4QQZF0
-
server_id
1234856972927631390
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Builder_For_Zyrxo_showcases_All_tools.exe
Files
-
BUILDER_FOR_ALL_TOOLS_ZYRXO.rar.rar
-
Builder_For_Zyrxo_showcases_All_tools.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ