Behavioral task
behavioral1
Sample
hack.exe
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
hack.exe
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
hack.exe
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
hack.exe
Resource
debian9-mipsel-20240611-en
General
-
Target
hack.exe
-
Size
92KB
-
MD5
c6fe2e5abd5d525a5985d74cb4eb9b98
-
SHA1
34ee55184bf65e57855836e7c31f4a31fcee8b05
-
SHA256
a6d82153b8f1b342dd793901278b3c1f5886d9d893b9a7ead55929d8e6cd50e6
-
SHA512
2ddd5c9d6278e81a97ca6da123a4b491ffe6d7ff3f8629605d9a1eadc7c39784fc0aba50791f4eeb186a8b6ee5f4a421a04009625be4f4391b5aa150b61a8929
-
SSDEEP
1536:42WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+SPIqEaDtf:4Zv5PDwbjNrmAE+eIJaDx
Malware Config
Extracted
discordrat
-
discord_token
MTIyMTIwNDc4MDk1NzgzMTI2Nw.GmQf6c.zoS5R_Dke4g1enDbU8teZH9NMB5Xx7OSHgBPd0
-
server_id
1221205721236897802
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hack.exe
Files
-
hack.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ