discordrat | swift[.]exe

General

Target
swift.exe
Size 78KB
Sample240610-t26bkstepp
SHA256 8ea2d2e46ea334e7f908b36fbc95191ab86fbaa0186e6bce5b7d52e2396cc789
MD5 319e084ef0d7ea9ecebcccc50f2bc054
SHA1 a5cfce63565b1be1c5aceafe7d5e82e7aead06d7
SHA512 02e466419964a953fcc9bf0e8d992583fd6e508987bac5a3e957efef0dc7946725ef8e04822518428bfd9b42edb617274b54232c4bf7a072bebe8820767a1af3
SSDEEP 1536:W2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+VPI8:WZv5PDwbjNrmAE+FI8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0OTY1NTAzOTcxOTY0MTEwOA.Gab4bV.cX5u0GePqaXBehuHah6EF8g8zrkw-DhNAE__wQ
server_id
1249657445706371173

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift.exe

File Explorer

swift.exe

.exe 78KB

swift.exe

SHA256 8ea2d2e46ea334e7f908b36fbc95191ab86fbaa0186e6bce5b7d52e2396cc789
MD5 319e084ef0d7ea9ecebcccc50f2bc054
SHA1 a5cfce63565b1be1c5aceafe7d5e82e7aead06d7
SHA512 02e466419964a953fcc9bf0e8d992583fd6e508987bac5a3e957efef0dc7946725ef8e04822518428bfd9b42edb617274b54232c4bf7a072bebe8820767a1af3
SSDEEP 1536:W2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+VPI8:WZv5PDwbjNrmAE+FI8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing