discordrat | Client-built[.]bin[.]exe

Resubmissions

04/12/2024, 18:22

241204-w1cc8azpbl10

04/08/2024, 11:05

240804-m6tp1steml10

Sharing

Copy URL Twitter E-mail

General

Target
Client-built.bin.exe
Size 78KB
Sample240804-m6tp1steml
SHA256 7388c664fecd46ba3176b1e55a873b5aff6d0713144ee3431f2269af4bb1868e
MD5 e90737cd3bfe5407b6a79c0cd491a2fe
SHA1 5bb9667c0f18fe6aa36b7a9c6035110a5efbb541
SHA512 85c4be4deb507525b5c78df9d029d2fc7805f1bab2978cabdf541b2f24bbc32a8b310553a0802a8768673ca08cf4adf1938659cda95019b571c54a8815bd50b1
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+MPIC:5Zv5PDwbjNrmAE+gIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2OTU5NTM4NjgyNjE5NDk2NA.G8loOF.5qY2P_nm2NPHz3_p8KNCrzjqUVN_4JC64jJgfE
server_id
1269595255653531691

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.bin.exe

File Explorer

Client-built.bin.exe

.exe 78KB

Client-built.bin.exe

SHA256 7388c664fecd46ba3176b1e55a873b5aff6d0713144ee3431f2269af4bb1868e
MD5 e90737cd3bfe5407b6a79c0cd491a2fe
SHA1 5bb9667c0f18fe6aa36b7a9c6035110a5efbb541
SHA512 85c4be4deb507525b5c78df9d029d2fc7805f1bab2978cabdf541b2f24bbc32a8b310553a0802a8768673ca08cf4adf1938659cda95019b571c54a8815bd50b1
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+MPIC:5Zv5PDwbjNrmAE+gIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths