Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240704-de
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20240709-de
Behavioral task
behavioral3
Sample
Client-built.exe
Resource
android-x64-arm64-20240624-de
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
5b15da23c0cd1d4b2f9d3cf7e97c66b9
-
SHA1
497124f7098aa603a93ab454f2a543532375fc7e
-
SHA256
a5bc70cf93aa47edf14165c016bd6a61da1171133dc7951c67b1461321d6ab63
-
SHA512
2ebe94f3fdfd2f4f85efe5655c49093f9ea1740d52abbdb75ba770f03eb19db4de2f0615da65b604a63a32c2e52d0fc3c9a747de52264146cbd1b2b58f62681e
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+VPIC:5Zv5PDwbjNrmAE+FIC
Malware Config
Extracted
discordrat
-
discord_token
MTE5NjkxMDQ5Mzg3NzY4NjQwMw.GpBG7T.4yoz45TeRMvrDOT9SFSRsnsnYO8NRMIQccrqz0
-
server_id
1260379272208453672
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ