General

  • Target

    Vape.rar

  • Size

    2.5MB

  • MD5

    9fd38e9ca6c7d97e0a832be735a7fb62

  • SHA1

    a747808211ec504e8f2dc49705c982bbcbe8e2bf

  • SHA256

    d3c9145e5d415f26bee532866228c2f8a2dd1256af7efa14682b4f91afbcb2ed

  • SHA512

    90743009b547cf9a34434bcb4b9b0e91ae8d0779f4ac17166d9fbd45cdc36dc63f242de73ce55bc45b555a3be4d9ff540fd06d91e477c7324fdfdff2eb625b73

  • SSDEEP

    49152:hAkDmbVCDJja0U9BhgxY0WDJ7flPzqmfd57:hEbVsJYrDJ7gmz

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI5Mjk3NzAzNDk0MzAwODg5MA.GUtIvD.vaGauQAWYFeLWJRnUaocQs4q3Ztcew_JgOoy8U

  • server_id

    1292965909807501376

Signatures

  • Discordrat family
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Vape.rar
    .rar
  • vape/LICENSE
  • vape/LICENSE.txt
  • vape/Plugins/User_Login.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • vape/README.md
  • vape/bin/Microsoft.AspNetCore.Hosting.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.AspNetCore.Hosting.Server.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.AspNetCore.Http.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.AspNetCore.Http.Features.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.AspNetCore.WebUtilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.CodeAnalysis.Scripting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.DotNet.PlatformAbstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Caching.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Caching.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Configuration.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.DependencyInjection.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.DependencyInjection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.DependencyModel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.FileProviders.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Hosting.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Http.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Logging.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Extensions.Primitives.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.IdentityModel.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.IdentityModel.JsonWebTokens.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.IdentityModel.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Net.Http.Headers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Scripting.Metadata.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Scripting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • vape/bin/Microsoft.Xaml.Behaviors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/cs/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/cs/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/de/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/de/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/de/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/en/HandyControl.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • vape/bin/locales/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/es/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/es/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/es/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/fr/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/fr/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/fr/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/it/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/it/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/it/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/it/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ja/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ja/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ja/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ja/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ko/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ko/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ko/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ko/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pl/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pl/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pl/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pl/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pt-BR/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pt-BR/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pt-BR/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/pt-BR/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ru/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ru/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ru/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/ru/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/tr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/tr/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/tr/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/tr/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hans/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hans/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hans/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hans/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hant/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hant/Microsoft.CodeAnalysis.CSharp.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hant/Microsoft.CodeAnalysis.Scripting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/bin/locales/zh-Hant/Microsoft.CodeAnalysis.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • vape/injector.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections