General

  • Target

    dnlib.zip

  • Size

    476KB

  • MD5

    95577e04faffbbe124597197e7e873ec

  • SHA1

    8e8e18a9f658ff54de28843ff50f6b2d7c043c36

  • SHA256

    3b145171ad5c03f113a4d44eaae4406ef098c0436cc2b6df5523c0e1b2963de2

  • SHA512

    e2399094fdabd06571e421cc8f2941cd302d83eba42ef8d0de507d53b1a44a16410cba9cf8c735e07b360fd9dc6bc6771a517f98577dfca7cbb4b6c43913ec62

  • SSDEEP

    12288:AU4L0WXrwuuWzloW1njSZnCFALr0YqJtLrjjo:l4NXrZzzm2nj+MBtLbo

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTAzMzQ2NzA0MzgyOTI1NjIzMg.G4UNeh.nIwo45AlwhSb5yhADytdpXdiYF-i-GR3t_QATQ

  • server_id

    1282683459751510101

Signatures

  • Discordrat family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • dnlib.zip
    .zip
  • Client-built.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/Discord rat.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • builder.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections