Behavioral task
behavioral1
Sample
RadScript-LTM.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RadScript-LTM.exe
Resource
win10v2004-20240704-en
General
-
Target
RadScript-LTM.exe
-
Size
78KB
-
MD5
ed3336cb4bf8338766b3837b8ef15c60
-
SHA1
2aa00d65d40296d8e528dc2e4a2b70ffe4fa0bc0
-
SHA256
3a47516a9aa240ff0699be768a97cdbd5c6a6a2ae0914c4da05e96fa509d19b6
-
SHA512
733c9d092d295d0b1b3356feda27ea7241571236221c3a5b586a21ba87e10a0026cb7cb1feadafdb17930789917e98815f754145f565416b8167fea5852b3091
-
SSDEEP
1536:wIQOI8S4zTMHFEOEGZefHeKrIX8amErwbjNrB+uexCroKV6+fd6:wIq8S4nMLeGKrIX8amcwbjNrB+xSd6
Malware Config
Extracted
discordrat
-
discord_token
MTI0ODA5NTUwMzU2MDczNjgyOQ.GDa56t.9JQ8X9M_IhzNN2OonxifeOaAfNRq8mv0dYTIRc
-
server_id
1221950436458893433
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RadScript-LTM.exe
Files
-
RadScript-LTM.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ