discordrat | DiscordHackerTools[.]exe

General

Target
DiscordHackerTools.exe
Size 90KB
Sample240920-sxb2hatcph
SHA256 95e5f46c36b28533bbf92f1a264dcc439aea1b0e030e360998e830b5b7036edf
MD5 fdd2dbdc384cfcedf86537203b6ed986
SHA1 37f7f2ccc0f594445ccc1b846da2cf7885dfea6d
SHA512 161d6524e73891b719c28b29e95734f30ace6e93771164faed3bdab689e59ef641e5645ee5c5d458518b5200f865dcc62ab4336b2f899bbcaef79cced0c6538c
SSDEEP 1536:sbPjt72uOFmYskRPUAqtBTldwr0bpAkA/rZgbGNra+uexCxoKV6+f2vH:ajtyuOFpskpgBTlugmgbGNra+bS2P
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI4NjY5NzM2MzA0OTY3NjgyMg.GXVoQY.9z4vKuRhM26WGS-YJsP0Qdv7XSkZ1mvw0jZ_4w
server_id
1286696321482489930

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DiscordHackerTools.exe

File Explorer

DiscordHackerTools.exe

.exe 90KB

DiscordHackerTools.exe

SHA256 95e5f46c36b28533bbf92f1a264dcc439aea1b0e030e360998e830b5b7036edf
MD5 fdd2dbdc384cfcedf86537203b6ed986
SHA1 37f7f2ccc0f594445ccc1b846da2cf7885dfea6d
SHA512 161d6524e73891b719c28b29e95734f30ace6e93771164faed3bdab689e59ef641e5645ee5c5d458518b5200f865dcc62ab4336b2f899bbcaef79cced0c6538c
SSDEEP 1536:sbPjt72uOFmYskRPUAqtBTldwr0bpAkA/rZgbGNra+uexCxoKV6+f2vH:ajtyuOFpskpgBTlugmgbGNra+bS2P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\itamar\Desktop\Discord-RAT-2.0-master\Discord rat\obj\Debug\Discord rat.pdb

Sharing