discordrat | do not download and run[.]exe

Resubmissions

03/11/2024, 00:29

241103-atdf2syray10

03/11/2024, 00:27

03/11/2024, 00:23

03/11/2024, 00:19

03/11/2024, 00:16

03/11/2024, 00:11

Sharing

Copy URL Twitter E-mail

General

Target
do not download and run.exe
Size 78KB
Sample241103-atdf2syray
SHA256 9da14eafeaff261c893fe5e252ecee52465c403325b9c3ba761e5d80ca76866a
MD5 f2c5e50d71723a255faafb127396b119
SHA1 5784b322726fe05abae13b8dde3c6bcb10eaf83f
SHA512 5a955fca58d1f105d5ffe6004b18e013f69dbf0a06538d5c6192e9964e7249a7cbb8335411b263d56cb8108bf610f29f4c848c0d38f0c68bcfac73bb0a341259
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTMwMjMwNTMyNzY2MzkzOTcyNg.GkZ69I.EmDu656kW3-o_fxbEajqbFdrqzR7r2g-hNmbM0
server_id
1302304456985149450

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
do not download and run.exe

File Explorer

do not download and run.exe

.exe 78KB

do not download and run.exe

SHA256 9da14eafeaff261c893fe5e252ecee52465c403325b9c3ba761e5d80ca76866a
MD5 f2c5e50d71723a255faafb127396b119
SHA1 5784b322726fe05abae13b8dde3c6bcb10eaf83f
SHA512 5a955fca58d1f105d5ffe6004b18e013f69dbf0a06538d5c6192e9964e7249a7cbb8335411b263d56cb8108bf610f29f4c848c0d38f0c68bcfac73bb0a341259
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths