Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10-20240404-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
d65d0f235414a922fbe4391dfce86013
-
SHA1
15f1001101b391d6a73b7693fbba4ff55119f021
-
SHA256
e87aa247edcc93c7cbc650e27ef5338642652b5d22b7c638dd3189c4c8e2f48c
-
SHA512
b29560e26dc93334af488082e3da7850c2b754b4c0c04104a9292e11835e79bfa03900cbbe2ad5f342cb3d511b5ff275f856def82b00be11a66efc9a7f23aa50
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+RDPIC:5Zv5PDwbjNrmAE+RbIC
Malware Config
Extracted
discordrat
-
discord_token
MTI0NzkyMTE1NzMyNDI3OTg2OQ.G9VUu5.TV4-4S9moSDBJ-Gz5dtGjGSSt8f-OMEelo2fD8
-
server_id
1247306459285291180
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ