General

  • Target

    Discord.exe

  • Size

    74KB

  • MD5

    81eecbef60edf6e46d4c91f5f90f18d8

  • SHA1

    bf1926da1a88e06e65b4076922aa9b644130e6e6

  • SHA256

    eb8bc5287a5b1e3fde917ee5e35d83bad6ac14cae6b4d7bb7e5b1a24989fd3d7

  • SHA512

    4e18054a89b9f76de16ee832443976d80e2dfb3e68b0ebe81a718402df57643a724d661ee7e86368de75a1efc731ff39fd85263579d106303e8efe2c8cef5b81

  • SSDEEP

    1536:EUKkcx9pXCTyPMV6leiUIt/1b8/EZKQzcrMVclN:EUDcx958yPMVIeiv/1b8GKQWOY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

147.185.221.20:49485

Mutex

gwbhzwlfrv

Attributes
  • delay

    1

  • install

    true

  • install_file

    Discord.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections