discordrat | Client-built[.]exe

Resubmissions

13/07/2024, 12:03

240713-n8hwzasbme10

13/07/2024, 12:03

13/07/2024, 02:14

13/07/2024, 02:06

13/07/2024, 02:03

Sharing

Copy URL Twitter E-mail

General

Target
Client-built.exe
Size 78KB
Sample240713-n8hwzasbme
SHA256 41112af8e2607ffffa2d3251374d36c2acd239e04012f4bd4b86d62b71061886
MD5 7acb83ea4e34507f021eb6d6141a8c9e
SHA1 058ae3035af017e16a1eeae3ca46b4e912420fb8
SHA512 0b71cd12ac99eaa6d97a10386190355852227444c3765ced1bd3e50eeef8ab1c1319911cbf5a954aba1750154fc6356de6be8a9afd72b2b489424de7a8010196
SSDEEP 1536:K2WjO8XeEXF15P7v88wbjNrfxCXhRoKV6+V+3PIC:KZb5PDwbjNrmAE+/IC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
https://discord.com/api/webhooks/1261501911916482582/DWfi1umSb2C2qMgkiBlA3CToo-Okuv-IDp-C5Sr28gd-eBo70-5l1Q0ASNbSY0fxONna
server_id
1261501863644368916

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 41112af8e2607ffffa2d3251374d36c2acd239e04012f4bd4b86d62b71061886
MD5 7acb83ea4e34507f021eb6d6141a8c9e
SHA1 058ae3035af017e16a1eeae3ca46b4e912420fb8
SHA512 0b71cd12ac99eaa6d97a10386190355852227444c3765ced1bd3e50eeef8ab1c1319911cbf5a954aba1750154fc6356de6be8a9afd72b2b489424de7a8010196
SSDEEP 1536:K2WjO8XeEXF15P7v88wbjNrfxCXhRoKV6+V+3PIC:KZb5PDwbjNrmAE+/IC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths