Behavioral task
behavioral1
Sample
GOTMYTOKENUBITCH.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
GOTMYTOKENUBITCH.exe
Resource
win10v2004-20241007-en
General
-
Target
GOTMYTOKENUBITCH.exe
-
Size
78KB
-
MD5
83ec3285fa604df1fd383515831f6d94
-
SHA1
79de32233f2e64785273df5ea74b1a262f5c08b0
-
SHA256
85b3bc882b829679c4fcba10c9d95bf754b6fcd63ae06e842c5f737ed27bfe57
-
SHA512
e848b16d1e92d5236c9f003345266d5cc95f33c03187974928fec7b66a8c957b6eba59c710ffcfe21cccf1ac100b820d4634f154494f4b32a7f743b70bf6c38c
-
SSDEEP
1536:r2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+DPIC:rZv5PDwbjNrmAE+bIC
Malware Config
Extracted
discordrat
-
discord_token
MTI5Mjg0MzMwMDQ3ODI1NTIxMA.Grp0nq.IltV2goLIM_c10bpfATLRoFvn6NwJdH5SZVh-
-
server_id
1295375629696634901
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource GOTMYTOKENUBITCH.exe
Files
-
GOTMYTOKENUBITCH.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ