discordrat | Client-built[.]exe

General

Target
Client-built.exe
Size 78KB
Sample240520-21f93aae33
SHA256 94edbb36c955784d3638c761b143f7dea8f4e4aca1dbab7e22309d346398528e
MD5 9746c7d6814a39e9d01068d0b66fa411
SHA1 25f2856e790ac9c9df51684de7e40645de687822
SHA512 464e26e52eb93275de9ea6c947026c0a89c889caf19e55edc168aa43cb47b552dc41b6fb82567ab7225b3f35555702886890eaf5b087c9bafdddb67a447ee356
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rPIC:5Zv5PDwbjNrmAE+DIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIwMjQxNjM0MTg0MDAzNTg4MA.GxG6wz.GiQR880jZxvTfvRnRHWDIO6zPRo3HaVQNkIHJU
server_id
1202411441395601408

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 94edbb36c955784d3638c761b143f7dea8f4e4aca1dbab7e22309d346398528e
MD5 9746c7d6814a39e9d01068d0b66fa411
SHA1 25f2856e790ac9c9df51684de7e40645de687822
SHA512 464e26e52eb93275de9ea6c947026c0a89c889caf19e55edc168aa43cb47b552dc41b6fb82567ab7225b3f35555702886890eaf5b087c9bafdddb67a447ee356
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rPIC:5Zv5PDwbjNrmAE+DIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing