Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20240704-en
General
-
Target
Client-built.exe
-
Size
89KB
-
MD5
ef6d019f15f74d6ad839a9ba75318981
-
SHA1
1ebbe171a6cad7d3d2327987b465e6c956b7b439
-
SHA256
b951272f47ced0c14aa6be5372daa3e89fff7b44dc5ae253c8166aeffe667a15
-
SHA512
6078520ff4ea91b971421f4f434726b6f626d407d9dbc388bc830ee5defb14e3b40432b7ad248472a146567679ff43443250965d5f84777aa9b342cb93fac5c9
-
SSDEEP
1536:nE+2kB+5mjlB7OJ7nyfqgjOXT3UhqWkIod+K46MUL2UgbmNrt+fexCxoKV6+fcGH:Ed55mjDOJmfqgjOD3UhqpI4T4oLtgbm
Malware Config
Extracted
discordrat
-
discord_token
MTI1NTcyNzcxMzM5ODgyMDg2NQ.GY_3hS.g7WGHrqjV92f8bpx1SBQS0hKECEsHYsCTP5ByY
-
server_id
1255727160723767347
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Password: 123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ