Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Pepper+X.zip

  • Size

    1.6MB

  • MD5

    c6af1e57264cb5f57cb0fcc5047e2304

  • SHA1

    4008bd81f54be08e53b2660fdb098e7819a961e5

  • SHA256

    daa8667f3dcc1e6e761e2477d55b26c91e7765bd7dc1334d087e4dfdf5e4bce7

  • SHA512

    ff013baecc03ccd21caba8707290d8c421135219174270bd89ee1d787df5e442a998671d7dfa529287404908e7cfba113d4d0f96337ab507c9a5a3039890eb14

  • SSDEEP

    49152:u619BWD234y90y8cV7IauKuApp3z6Y/8vg7t:X1e234yCyVV7Ia8Az6Mt

Score
10/10
discordrat

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI3NDQ2MTY0ODE3Mzc5NzUyNw.G-SXQP.a265Q9h_KL-hcXcTVcUWe7f2rnunX77woqQbIw

  • server_id

    1273082745244876890

Signatures

  • Discordrat family
    discordrat
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Pepper+X.zip
    .zip
  • Monaco/Monaco.html
    .js
  • Monaco/base.txt
  • Monaco/classfunc.txt
  • Monaco/debug.log
  • Monaco/globalf.txt
  • Monaco/globalns.txt
  • Monaco/globalv.txt
  • Monaco/vs/base/worker/workerMain.js
    .js
  • Monaco/vs/basic-languages/bat/bat.js
  • Monaco/vs/basic-languages/coffee/coffee.js
  • Monaco/vs/basic-languages/cpp/cpp.js
  • Monaco/vs/basic-languages/csharp/csharp.js
  • Monaco/vs/basic-languages/csp/csp.js
  • Monaco/vs/basic-languages/css/css.js
  • Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • Monaco/vs/basic-languages/fsharp/fsharp.js
  • Monaco/vs/basic-languages/go/go.js
  • Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • Monaco/vs/basic-languages/html/html.js
    .js
  • Monaco/vs/basic-languages/ini/ini.js
  • Monaco/vs/basic-languages/java/java.js
  • Monaco/vs/basic-languages/less/less.js
  • Monaco/vs/basic-languages/lua/lua.js
  • Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • Monaco/vs/basic-languages/msdax/msdax.js
  • Monaco/vs/basic-languages/mysql/mysql.js
  • Monaco/vs/basic-languages/objective-c/objective-c.js
  • Monaco/vs/basic-languages/pgsql/pgsql.js
  • Monaco/vs/basic-languages/php/php.js
  • Monaco/vs/basic-languages/postiats/postiats.js
  • Monaco/vs/basic-languages/powershell/powershell.js
  • Monaco/vs/basic-languages/pug/pug.js
  • Monaco/vs/basic-languages/python/python.js
  • Monaco/vs/basic-languages/r/r.js
  • Monaco/vs/basic-languages/razor/razor.js
    .js
  • Monaco/vs/basic-languages/redis/redis.js
  • Monaco/vs/basic-languages/redshift/redshift.js
  • Monaco/vs/basic-languages/ruby/ruby.js
  • Monaco/vs/basic-languages/rust/rust.js
  • Monaco/vs/basic-languages/sb/sb.js
  • Monaco/vs/basic-languages/scss/scss.js
  • Monaco/vs/basic-languages/solidity/solidity.js
  • Monaco/vs/basic-languages/sql/sql.js
  • Monaco/vs/basic-languages/st/st.js
  • Monaco/vs/basic-languages/swift/swift.js
  • Monaco/vs/basic-languages/vb/vb.js
  • Monaco/vs/basic-languages/xml/xml.js
  • Monaco/vs/basic-languages/yaml/yaml.js
  • Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Monaco/vs/editor/editor.main.css
  • Monaco/vs/editor/editor.main.js
    .js
  • Monaco/vs/editor/editor.main.nls.de.js
  • Monaco/vs/editor/editor.main.nls.es.js
  • Monaco/vs/editor/editor.main.nls.fr.js
  • Monaco/vs/editor/editor.main.nls.it.js
  • Monaco/vs/editor/editor.main.nls.ja.js
  • Monaco/vs/editor/editor.main.nls.js
  • Monaco/vs/editor/editor.main.nls.ko.js
  • Monaco/vs/editor/editor.main.nls.ru.js
  • Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Monaco/vs/language/css/cssMode.js
    .js
  • Monaco/vs/language/css/cssWorker.js
    .js
  • Monaco/vs/language/html/htmlMode.js
    .js
  • Monaco/vs/language/html/htmlWorker.js
    .js
  • Monaco/vs/language/json/jsonMode.js
    .js
  • Monaco/vs/language/json/jsonWorker.js
    .js
  • Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • Monaco/vs/language/typescript/tsMode.js
    .js
  • Monaco/vs/language/typescript/tsWorker.js
    .js
  • Monaco/vs/loader.js
    .js
  • Pepper X.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Pepper_X.exe.config
    .xml
  • Pepper_X.pdb
  • VulneraAPIProject.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections