General

  • Target

    test3.rar

  • Size

    511KB

  • MD5

    ee6c7bb807c8508392df111285f0882d

  • SHA1

    9020e25edda82fc551391631b0ed27a8604d1508

  • SHA256

    19cfac8181f164ad29bd35d33c6389fa75fa7eea2066ce43b1e054e687b2fb34

  • SHA512

    774d702b30006cddddb39746293855302f010e6e551d0a3672d3ddf0c84b8c8fba9180fba50e1cadcaf7997e4ea33ddf4477412ef34d082c7bfac56df8d5f5de

  • SSDEEP

    12288:UwJzon6c2RSDtEBR4aPI8hy71O27+NMdIjo+DjVpVUV:UwJzMsWGBy71oNmIbVrUV

Score
10/10

Malware Config

Signatures

  • Discordrat family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • test3.rar
    .rar
  • test3/Release/Discord rat.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • test3/Release/Discord rat.exe.config
  • test3/Release/Discord rat.pdb
  • test3/builder.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • test3/builder.exe.config
  • test3/builder.pdb
  • test3/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • test3/dnlib.xml
    .xml
  • test3/help.txt