General
-
Target
release (1).zip
-
Size
472KB
-
Sample
241101-v5hkcstbma
-
MD5
a16b6a5fb54c56da01bfa9b3f2dca6bb
-
SHA1
f74fea86795bf2d23140fe2270b912a600440204
-
SHA256
0b4112e1d7bc8c8662d2c716bd713a25fae3561801b855b7c58f1a729ec00ad9
-
SHA512
376d3b327f8c58565ebdf8956ce76e4ff4293eb4e05520f1fe5f10bb71b60d63983712ea6e13753458f33f3f380bb5a5acfb51ba06495dacb21094a944d4c180
-
SSDEEP
12288:8tSMhRFBtoaoWZlz/NDdica4zAIUcqxW1Ts+:CSMhHoaoWZzDEca4jRq41TV
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Release/Discord rat.exe
Resource
win11-20241023-en
Behavioral task
behavioral3
Sample
builder.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
dnlib.dll
Resource
win11-20241007-en
Malware Config
Extracted
discordrat
-
discord_token
MTI5OTEzNTM5MDMyOTg2ODM4MA.GSXT4J.l1NwkThNC0WguODQ7jZyklX5sQTedQ0j6SqCuY
-
server_id
1215457022309306480
Targets
-
-
Target
Client-built.exe
-
Size
78KB
-
MD5
93f25fd89524c78ba07d5465e4cd335f
-
SHA1
9abebdf8fe6c710edf86a8b0fa18a853d929900d
-
SHA256
445efaeb06cd5448531b3243c5ae2c1af1458545ba0059fdd6fe9466d23423ea
-
SHA512
fe0f000f743ba91cd7cfe14a8cdf2a64f2b6401c4514aa00818c932cee61c958af1434dae7fcc7db842cda6c576f1f14dca0653c8b5c8dd6fafb14d68131d97b
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+GPIC:5Zv5PDwbjNrmAE+iIC
Score10/10-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
Release/Discord rat.exe
-
Size
79KB
-
MD5
d13905e018eb965ded2e28ba0ab257b5
-
SHA1
6d7fe69566fddc69b33d698591c9a2c70d834858
-
SHA256
2bd631c6665656673a923c13359b0dc211debc05b2885127e26b0dce808e2dec
-
SHA512
b95bfdebef33ac72b6c21cdf0abb4961222b7efd17267cd7236e731dd0b6105ece28e784a95455f1ffc8a6dd1d580a467b07b3bd8cb2fb19e2111f1a864c97cb
-
SSDEEP
1536:YCH0jBD2BKkwbPNrfxCXhRoKV6+V+y9viwp:VUjBD2BPwbPNrmAE+MqU
Score10/10-
Discordrat family
-
-
-
Target
builder.exe
-
Size
10KB
-
MD5
4f04f0e1ff050abf6f1696be1e8bb039
-
SHA1
bebf3088fff4595bfb53aea6af11741946bbd9ce
-
SHA256
ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa
-
SHA512
94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12
-
SSDEEP
96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs
Score3/10 -
-
-
Target
dnlib.dll
-
Size
1.1MB
-
MD5
508ccde8bc7003696f32af7054ca3d97
-
SHA1
1f6a0303c5ae5dc95853ec92fd8b979683c3f356
-
SHA256
4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a
-
SHA512
92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d
-
SSDEEP
24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww
Score1/10 -