discordrat | Client-built[.]exe

Resubmissions

02/08/2024, 22:12

240802-14th5asflj10

02/08/2024, 20:47

240802-zkzqcszblm10

Sharing

Copy URL Twitter E-mail

General

Target
Client-built.exe
Size 78KB
Sample240802-14th5asflj
SHA256 eb2d9753a0947d41505604498af6dd89fee2b0215fa20e375144e012d457ea0b
MD5 a2fb449bd3ed381e6ca38085b375c98b
SHA1 7d310e246ed0c5f28f2845bb872d04780d8368bd
SHA512 8ad703dc3dac923e18c0aa95be4d6a903e5ed9789a478d35344d4025c319d0f71f8b2f9804ed0ea43859a5594df5e95fb1fafdfff43679ad2b94ef4cb967011b
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+vPIC:5Zv5PDwbjNrmAE+XIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTEyOTg5MjIxNzU5OTgyMzk4Mw.GnWnte.vyhNeWc4uW-fNQNN6fLlu3GI805VkSgmANbczg
server_id
1267744364285661215

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 eb2d9753a0947d41505604498af6dd89fee2b0215fa20e375144e012d457ea0b
MD5 a2fb449bd3ed381e6ca38085b375c98b
SHA1 7d310e246ed0c5f28f2845bb872d04780d8368bd
SHA512 8ad703dc3dac923e18c0aa95be4d6a903e5ed9789a478d35344d4025c319d0f71f8b2f9804ed0ea43859a5594df5e95fb1fafdfff43679ad2b94ef4cb967011b
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+vPIC:5Zv5PDwbjNrmAE+XIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths