Behavioral task
behavioral1
Sample
FeatherB/FeatherBootstrapper.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
FeatherB/FeatherBootstrapper.exe
Resource
win10v2004-20240709-en
General
-
Target
FeatherB.zip
-
Size
28KB
-
MD5
6537f8cd8bf8722cb53360ab35926ce6
-
SHA1
ff218616109ac6a9008a072d9ee683baf887d7c2
-
SHA256
636d2a9126848eff43713c817d5eae07790716e44f04c4ee28480791c1afbeca
-
SHA512
fdeae12995461a0f793e560e337284a7eea77b16634bb19182da0185d6d4dafbc9808e3b87f94947bfee6b9afea28766b6df78534f5a6a3ddd9665b1a4766609
-
SSDEEP
384:E54cbz62APSweTZQkNK+I7JO6Bvohzy8dozhnWXk0t+7dcoj9IAShFvxF248ddtN:E5lz6yZDgr9OtA8dozY00t+7zAxi7g2
Malware Config
Extracted
discordrat
-
discord_token
MTI2NDYzOTU1NTE3NzQxNDgyMA.GpQiC-.xgekN5QAm2mnQBzTvkAFYN3oeEJvWZrwww2ZII
-
server_id
1264610246916178053
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FeatherB/FeatherBootstrapper.exe
Files
-
FeatherB.zip.zip
-
FeatherB/FeatherBootstrapper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ