Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
Run.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Run.exe
Resource
win10v2004-20240802-en
General
-
Target
Run.exe
-
Size
78KB
-
MD5
af4b2ac80f5f1cdf5b67fb87918fa8f6
-
SHA1
2d9a85401738144e01000a11d5ad16534dd7703a
-
SHA256
0d12c936747a895675c12ae53af28352bc8a1c6fdec16aa4abf35499e5c86b94
-
SHA512
6f9e4c481ac8678e14ce38b61c5108efade109a03b39330018bd7d3deb9a562abd89bce8ec0a60ec7ee5da592e9158f88d5a7b805997d3515b9e3d2797c2c59e
-
SSDEEP
1536:P2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+VPIu:PZv5PDwbjNrmAE+FIu
Malware Config
Extracted
discordrat
-
discord_token
MTI4OTA4NDQ4NjAxNzA5MzY1Mg.GU9sth.3N0tTy7lqu3KMV6HV1In6GWJPFUNSX5TtpGqBs
-
server_id
1289039707686178857
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Run.exe
Files
-
Run.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ