discordrat | Client-built[.]exe

Resubmissions

26/07/2024, 17:56

240726-wjfz3syanf10

26/07/2024, 14:18

240726-rmaj9awfrd10

Sharing

Copy URL Twitter E-mail

General

Target
Client-built.exe
Size 78KB
Sample240726-rmaj9awfrd
SHA256 cbb0279746d46bea9c94551e0a3dc9f24fb3fcfb27da1840aec704e3ca52c798
MD5 6884c635cbc0bb779d1d345abc2b3882
SHA1 c460892e826933d83ba94e411051a9160c0e9699
SHA512 b329558f46269f088e9ecbebb17618c283eef27d361b9ecbb27d942c2f11d9af672e8d089f762d76fc2cfa5d98ec9c7ed0df01e1caec02bdf5954b2088fdc1ce
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+cPIC:5Zv5PDwbjNrmAE+QIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1ODU2OTIyODI0NDQ4ODIyMw.G8KZqC.TXU-C3B-cX9WVrFyjBseEfScdO1B6ceHWB1w5w
server_id
1259139571518541825

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 cbb0279746d46bea9c94551e0a3dc9f24fb3fcfb27da1840aec704e3ca52c798
MD5 6884c635cbc0bb779d1d345abc2b3882
SHA1 c460892e826933d83ba94e411051a9160c0e9699
SHA512 b329558f46269f088e9ecbebb17618c283eef27d361b9ecbb27d942c2f11d9af672e8d089f762d76fc2cfa5d98ec9c7ed0df01e1caec02bdf5954b2088fdc1ce
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+cPIC:5Zv5PDwbjNrmAE+QIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths