General

  • Target

    release (3).zip

  • Size

    473KB

  • MD5

    8854b0abb3f0f442f719d676db33462b

  • SHA1

    2150e4243096dd659ed12b4b905a95d07d08bfd9

  • SHA256

    fd1714c58465116ec0d43eb2490c993235018eae95c3e1f64cd7fb3dd469e5c5

  • SHA512

    d8b9f95f2e8d8e216d7637d8d45d5b8569b132ad79ffcb594d275736b634ad89dd848380617b68c4b66b2a034fcd3c680fdf2b971988f842e3f5d8f5258547f0

  • SSDEEP

    12288:xfJ13+GoLo2d5ifXHE8134QwYOwFSFRCLQxP:RKGo8EifSQwY2xP

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTIzNTMyMzkzMDYwNTEyNTY5Mg.GyAxvk.S34TL9YmFw8GG_AfLFKBk5hiiBjYQun7c2Zt_4

  • server_id

    1244699256464605256

Signatures

  • Discordrat family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • release (3).zip
    .zip

    Password: 123

  • Client-built.exe
    .exe windows:4 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • Release/Discord rat.exe
    .exe windows:4 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • builder.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections