discordrat | Client-built[.]exe

General

Target
Client-built.exe
Size 78KB
Sample240505-wk2ceabg79
SHA256 6138ff42dbc206690422ff11ba68758b52b6b12f49232b3aac20fac3176347d8
MD5 bc36339d259715c4fb7c681506bdd215
SHA1 a5f892fa06e4a96ac5eb043f6f7a2d562aa54b94
SHA512 5de9fcfbd4c55358e84a0808c083b6a9e00bb78c3159eb10af4d1640fb7b03cde2099b8a7a914a6a52a8fc9ecf9bc0a84a4662127772559d98877ae64bc32732
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzNjczNDg0ODUxMzczNjgyNw.GYx9r8.AvmyPnn0sb2NoZijUdM4ZGOUfHrS-MmxJNKUeg
server_id
1214787742026702861

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 6138ff42dbc206690422ff11ba68758b52b6b12f49232b3aac20fac3176347d8
MD5 bc36339d259715c4fb7c681506bdd215
SHA1 a5f892fa06e4a96ac5eb043f6f7a2d562aa54b94
SHA512 5de9fcfbd4c55358e84a0808c083b6a9e00bb78c3159eb10af4d1640fb7b03cde2099b8a7a914a6a52a8fc9ecf9bc0a84a4662127772559d98877ae64bc32732
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing