discordrat | Client-built[.]exe

General

Target
Client-built.exe
Size 78KB
Sample240603-amzqpsdf63
SHA256 b09fb462e22927fdfe5c96f4b747bbfaabcc56fd1f54bd7dd2cdc4e2a0f53b09
MD5 ceb3b62b890805b633f724c338eddc05
SHA1 f9b8afc1b41ffcd333b9e1ae7277add091b02778
SHA512 5a6511c7f88b9b29cf35994f87a0046edac6f541222f046ed7e1195a0b8e3008d9fe2b48eb3882787a1be437f4a758f665a31a72c4375444e122369754bbc5b0
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0NjYyNzA2ODc4ODA4NDc0Ng.Gn4uSB.1JK83gJAQgSND4dClwEWyTVChF5vXDczFrGz0w
server_id
1246627631135461376

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 b09fb462e22927fdfe5c96f4b747bbfaabcc56fd1f54bd7dd2cdc4e2a0f53b09
MD5 ceb3b62b890805b633f724c338eddc05
SHA1 f9b8afc1b41ffcd333b9e1ae7277add091b02778
SHA512 5a6511c7f88b9b29cf35994f87a0046edac6f541222f046ed7e1195a0b8e3008d9fe2b48eb3882787a1be437f4a758f665a31a72c4375444e122369754bbc5b0
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing