discordrat | Spoof[.]exe

General

Target
Spoof.exe
Size 78KB
Sample240723-l2k2ms1bpp
SHA256 40df802ea915c8e8512b89ab2a679abd989cafc5b790dcf2f477aef02e73b5a8
MD5 76a1b0dc7b01f3dfa44c1b413d1296f2
SHA1 e4275d58a76b2af020e481841c820f8ecdfca3d9
SHA512 1462f6b854315afd5b476f3dcdde99a35a3e628fe4d87a793888dcadc181abc269b926a77d98dbecfb3cc700e351a065cc9ac36522e39611bb7618ba395c18e5
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+7PIC:5Zv5PDwbjNrmAE+zIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2MTA3ODI5MTM4OTg3NDI5OA.G3D8Qc.joy_5q4IR_-dLRqBD8D-WZx-8MohCtmgu7lxyo
server_id
1261065603079471246

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoof.exe

File Explorer

Spoof.exe

.exe 78KB

Spoof.exe

SHA256 40df802ea915c8e8512b89ab2a679abd989cafc5b790dcf2f477aef02e73b5a8
MD5 76a1b0dc7b01f3dfa44c1b413d1296f2
SHA1 e4275d58a76b2af020e481841c820f8ecdfca3d9
SHA512 1462f6b854315afd5b476f3dcdde99a35a3e628fe4d87a793888dcadc181abc269b926a77d98dbecfb3cc700e351a065cc9ac36522e39611bb7618ba395c18e5
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+7PIC:5Zv5PDwbjNrmAE+zIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing