discordrat | Client-built[.]exe

General

Target
Client-built.exe
Size 78KB
Sample240809-m4jf9stelf
SHA256 5a0c51497d3ff11818340ffb4e10ab631fd74923a57e315c068b37f3e1ae3952
MD5 48b88393b5bea065a9dc213e1ca3a239
SHA1 7e587aef5d8a6988e02070f65f51710b1428f285
SHA512 cbe2414d965be615310f1c0421cf5a5fff1759c7344a6540253632835ea06039b119e60b9e5a53f6102f8b0acac1157931cfb612461ad2dd89025cc259ed8222
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIwOTI0MDMxODQzNjcwNDI2Ng.GV3uqM.q_1_-iJbxvHtLV17uuNAyHtplk8OLHpbr8b8O8
server_id
1271422756163944468

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

File Explorer

Client-built.exe

.exe 78KB

Client-built.exe

SHA256 5a0c51497d3ff11818340ffb4e10ab631fd74923a57e315c068b37f3e1ae3952
MD5 48b88393b5bea065a9dc213e1ca3a239
SHA1 7e587aef5d8a6988e02070f65f51710b1428f285
SHA512 cbe2414d965be615310f1c0421cf5a5fff1759c7344a6540253632835ea06039b119e60b9e5a53f6102f8b0acac1157931cfb612461ad2dd89025cc259ed8222
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing