Resubmissions

23-05-2024 17:47

240523-wc9c2sba26 3

23-05-2024 17:46

240523-wcjsdsah87 3

General

  • Target

    Discord.Raidkit.v2.4.5.zip

  • Size

    23.2MB

  • MD5

    ae4ed70618ef89ab5eb0959a2935c696

  • SHA1

    d502022863329ecf214dd70ac190885625e9efdc

  • SHA256

    2bc486140b5450eee580bc68dce58195710eb8c1c609a3541376a20e3002e402

  • SHA512

    ec600762e0a7b7b79ad1cc4cf7ba482692162cd1460a46678786edee52b10748cfaf52515e29dd151c87900d84dcb4086bd58278944b2313bc5892da00e60338

  • SSDEEP

    393216:WwIVXDwqXXuWHoWfN1/UmDAB43ea6/lOIYJPjlScofG5iXO2ZR3dsqwMRkQX2njb:EXDXXuOf3/phI4PjlStu5iFJCqjlSjxJ

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord.Raidkit.v2.4.5.zip
    .zip
  • Discord Raidkit v2.4.5.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • Discord Raidkit v2.4.5.pyc
  • _internal/MSVCP140.dll
    .dll windows:6 windows x64 arch:x64

    118dde577a38119350ab495f68a0326f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/VCRUNTIME140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_asyncio.pyd
    .dll windows:6 windows x64 arch:x64

    4e35d4f382a6e5820e4db9b220964fe1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    a36962884764276bb35985709aa4e40d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    c7e678778370beefa2be60d7f0444c52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    b4bc8290ce36e458b7f80d6ab6e100dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    a8173ef8679f8544a88e355945112c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    b865edd9b0c291111893fc2b523f7264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    9ff0f8f78fa8876d3d00f9ec2aa78b75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_overlapped.pyd
    .dll windows:6 windows x64 arch:x64

    1f6b0816935b9dea5ee9898c98097635


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    efe3e840cb4904222351e9b7f17afea3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    de62106114a70bb3c0dfb5c6513e0ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_sqlite3.pyd
    .dll windows:6 windows x64 arch:x64

    3883b7775ef7443dc4348a953afbd21e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    13fce691387104194c39d61bca67aa4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_uuid.pyd
    .dll windows:6 windows x64 arch:x64

    c2ef50d1f8f9a12aa6ad60689f8e919b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/_wmi.pyd
    .dll windows:6 windows x64 arch:x64

    7e3fdc8d0eb0570a9b19a000cd6e731d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/aiohttp/_helpers.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    1d189d7e5ff705b18c39c5325c252085


    Headers

    Imports

    Exports

    Sections

  • _internal/aiohttp/_http_parser.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    9fddad0f05a419e4109ae3f72202e302


    Headers

    Imports

    Exports

    Sections

  • _internal/aiohttp/_http_writer.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    442bd86c1151730492582aa3cc743e9e


    Headers

    Imports

    Exports

    Sections

  • _internal/aiohttp/_websocket.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    2d209c7d7f97d487290f47aa510db11e


    Headers

    Imports

    Exports

    Sections

  • _internal/attrs-23.2.0.dist-info/INSTALLER
  • _internal/attrs-23.2.0.dist-info/METADATA
  • _internal/attrs-23.2.0.dist-info/RECORD
  • _internal/attrs-23.2.0.dist-info/WHEEL
  • _internal/attrs-23.2.0.dist-info/licenses/LICENSE
  • _internal/base_library.zip
    .zip
  • _collections_abc.pyc
  • _weakrefset.pyc
  • abc.pyc
  • codecs.pyc
  • collections/__init__.pyc
  • collections/abc.pyc
  • copyreg.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1125.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp273.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_t.pyc
  • encodings/koi8_u.pyc
  • encodings/kz1048.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/oem.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • enum.pyc
  • functools.pyc
  • genericpath.pyc
  • heapq.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • ntpath.pyc
  • operator.pyc
  • os.pyc
  • posixpath.pyc
  • re/__init__.pyc
  • re/_casefix.pyc
  • re/_compiler.pyc
  • re/_constants.pyc
  • re/_parser.pyc
  • reprlib.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • stat.pyc
  • traceback.pyc
  • types.pyc
  • warnings.pyc
  • weakref.pyc
  • _internal/certifi/cacert.pem
  • _internal/charset_normalizer/md.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    f9f58fd722dea53fe5b29a3d6dba9a29


    Headers

    Imports

    Exports

    Sections

  • _internal/charset_normalizer/md__mypyc.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    facfc5ec70708b6566f37401fb8a64c6


    Headers

    Imports

    Exports

    Sections

  • _internal/cogs/anubis/ahelp.py
  • _internal/cogs/anubis/moderation.py
  • _internal/cogs/anubis/raid_prevention.py
  • _internal/cogs/anubis/surfing.py
  • _internal/cogs/qetesh/all_links.txt
  • _internal/cogs/qetesh/nsfw.py
  • _internal/cogs/qetesh/qhelp.py
  • _internal/cogs/shared/cmds.py
  • _internal/cogs/shared/handler.py
  • _internal/conf/config.py
  • _internal/frozenlist/_frozenlist.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    dfa2faaa0cc5b7b922185711e191c3e9


    Headers

    Imports

    Exports

    Sections

  • _internal/libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/libssl-3.dll
    .dll windows:6 windows x64 arch:x64

    dc44c25ab05f2ed83d242e885f9b4799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/multidict/_multidict.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    ab164bcfbcacde7d4dde43fe084e0c89


    Headers

    Imports

    Exports

    Sections

  • _internal/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    cf5b5f91e5aeac3c5953a0b69a300283


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/python312.dll
    .dll windows:6 windows x64 arch:x64

    5a22bd40d1b845990102286d0fb385f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/select.pyd
    .dll windows:6 windows x64 arch:x64

    e41677fc9cd5514cd954ce2ce19e425c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/selenium/webdriver/common/linux/selenium-manager
    .elf linux x64
  • _internal/selenium/webdriver/common/macos/selenium-manager
    .macho macos arch:arm64 arch:x64
  • _internal/selenium/webdriver/common/mutation-listener.js
    .js
  • _internal/selenium/webdriver/common/windows/selenium-manager.exe
    .exe windows:6 windows x86 arch:x86

    1d4b00e48c5e811dd385e4d9219a4ec7


    Headers

    Imports

    Sections

  • _internal/selenium/webdriver/firefox/webdriver_prefs.json
  • _internal/selenium/webdriver/remote/findElements.js
    .js
  • _internal/selenium/webdriver/remote/getAttribute.js
    .js
  • _internal/selenium/webdriver/remote/isDisplayed.js
    .js
  • _internal/shared/nuked.jpg
  • _internal/shared/shared.py
  • _internal/sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    ed878ce1e3ff946640049f8cd6032db2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/tools/osiris.py
    .py .js
  • _internal/tools/raider.py
  • _internal/ui/drui.py
  • _internal/ujson.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    02b3b605db3001519673185e699f8aa8


    Headers

    Imports

    Exports

    Sections

  • _internal/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    a3519e9a1b69560ea1c5fe43fd626ac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _internal/utils/async_utils.py
  • _internal/utils/dr_repo_utils.py
  • _internal/utils/io_utils.py
  • _internal/utils/log_utils.py
  • _internal/utils/request_utils.py
  • _internal/utils/runtime_utils.py
  • _internal/yarl/_quoting_c.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    0b8e6d85c57a407746d9e4d19362ad97


    Headers

    Imports

    Exports

    Sections