discordrat | SStlr[.]exe

General

Target
SStlr.exe
Size 78KB
Sample240920-dw8lrawbqe
SHA256 e0d5cedfc19c63b1015d0681295235eea136d0655219943557019b18effb8987
MD5 d2beca772cce31705d4ac2c7f7577ad8
SHA1 7371b8963fff597ce5f5512904e4f8ab879a06a3
SHA512 6520ed2fb64bdea2898b40873f715ad9afd5e14729c383474d81e0773f42889b74848102bfd789e39a6ede5f0904a7a66496c70d59792de1d92b8818f384eb16
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+OPIC:5Zv5PDwbjNrmAE+qIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI4NjA4MjY0OTUyOTUxNjA2NA.Gcx-AZ.UfnCLixPx9n_RbsOFtBOxB5V9Q_ek3rSRCt2S0
server_id
1285374325309968404

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SStlr.exe

File Explorer

SStlr.exe

.exe 78KB

SStlr.exe

SHA256 e0d5cedfc19c63b1015d0681295235eea136d0655219943557019b18effb8987
MD5 d2beca772cce31705d4ac2c7f7577ad8
SHA1 7371b8963fff597ce5f5512904e4f8ab879a06a3
SHA512 6520ed2fb64bdea2898b40873f715ad9afd5e14729c383474d81e0773f42889b74848102bfd789e39a6ede5f0904a7a66496c70d59792de1d92b8818f384eb16
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+OPIC:5Zv5PDwbjNrmAE+qIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing