discordrat | HaxMods GUI[.]exe

General

Target
HaxMods GUI.exe
Size 78KB
Sample240928-bbyvps1cmf
SHA256 9c1239acbd4ca0624a4529ad86de37bbc1d48b982812c67a9b011dcd08722f68
MD5 6a900d4d03f9804eceb266a016658f79
SHA1 6af52f2bbe6179c17355564b9676ff98f9a15080
SHA512 7711182f1e0130494d048111138a8b7f91fefc635cc11cf59fc285bf2b37cb4b5edea046531954897d76035502a67a00897146c528d40aa91b2e8c37094ff27a
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2OTg1MTgzMTc0NDU5Mzk5Mg.GR0WTi.6wJSWraeR-Rzl_I7fZ7aGCVXpAfAzHPpj4n9qM
server_id
976996222277672961

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HaxMods GUI.exe

File Explorer

HaxMods GUI.exe

.exe 78KB

HaxMods GUI.exe

SHA256 9c1239acbd4ca0624a4529ad86de37bbc1d48b982812c67a9b011dcd08722f68
MD5 6a900d4d03f9804eceb266a016658f79
SHA1 6af52f2bbe6179c17355564b9676ff98f9a15080
SHA512 7711182f1e0130494d048111138a8b7f91fefc635cc11cf59fc285bf2b37cb4b5edea046531954897d76035502a67a00897146c528d40aa91b2e8c37094ff27a
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing