General

  • Target

    rat.zip

  • Size

    472KB

  • MD5

    a16b6a5fb54c56da01bfa9b3f2dca6bb

  • SHA1

    f74fea86795bf2d23140fe2270b912a600440204

  • SHA256

    0b4112e1d7bc8c8662d2c716bd713a25fae3561801b855b7c58f1a729ec00ad9

  • SHA512

    376d3b327f8c58565ebdf8956ce76e4ff4293eb4e05520f1fe5f10bb71b60d63983712ea6e13753458f33f3f380bb5a5acfb51ba06495dacb21094a944d4c180

  • SSDEEP

    12288:8tSMhRFBtoaoWZlz/NDdica4zAIUcqxW1Ts+:CSMhHoaoWZzDEca4jRq41TV

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI5OTEzNTM5MDMyOTg2ODM4MA.GSXT4J.l1NwkThNC0WguODQ7jZyklX5sQTedQ0j6SqCuY

  • server_id

    1215457022309306480

Signatures

  • Discordrat family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • rat.zip
    .zip
  • Client-built.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/Discord rat.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • builder.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections