Overview

overview

10

Static

static

10

Bunifu_UI_v1.5.3.dll

windows7-x64

1

Bunifu_UI_v1.5.3.dll

windows10-2004-x64

1

Fluxteam_net_API.dll

windows7-x64

3

Fluxteam_net_API.dll

windows10-2004-x64

3

Module.dll

windows7-x64

3

Module.dll

windows10-2004-x64

3

Rc7.exe

windows7-x64

10

Rc7.exe

windows10-2004-x64

10

gamesense_api.dll

windows7-x64

1

gamesense_api.dll

windows10-2004-x64

1

qdRFzx.exe

windows7-x64

3

qdRFzx.exe

windows10-2004-x64

3

Resubmissions

25-11-2024 02:45

241125-c86ggstrbs 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rc7.rar

  • Size

    15.9MB

  • MD5

    8e0943663c0cf68f434518ffda48dc16

  • SHA1

    aa6037af08821f95d6c579b87765c53dc9e54890

  • SHA256

    27475195aa8a2be0e78555401a6e2cc37829ac96c81587cbd0a7d962c62d8a50

  • SHA512

    d81208ead32ebe19b6799f1c64b7cedb9efacc13371e3d5b591fdbfbf785b4a1aa1398c617573e998bb77ee0a4acf7a27e7a7e6936f40aceb46fe2c714dbb872

  • SSDEEP

    393216:KLh5PO8Vh5kvYvJfQWeRhwGfwrZ47AGdrVa/Fk:WbmwbFvJqwGfwru77eFk

Score
10/10
discordrat

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI4NjE0MzA5OTUzNzQ1NzIxNQ.GWPghN.pOcVC1-GttT7g7mX5LCtvswPNzetFbPhF0yZ7Y

  • server_id

    1191567918606073917

Signatures

  • Discordrat family
    discordrat
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Rc7.rar
    .rar
  • AlphaBlendTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Bunifu_UI_v1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Fluxteam_net_API.dll
    .dll windows:6 windows x86 arch:x86

    d7d27535ebdca8ed5b1d96e63f0cfe19


    Headers

    Imports

    Exports

    Sections

  • Module.dll
    .dll windows:6 windows x86 arch:x86

    58fe5b648a5b2f63b5a94f6dff1ed921


    Headers

    Imports

    Exports

    Sections

  • Rc7.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • bin/Monaco.html
    .js
  • bin/MonacoEditor.html
    .js
  • bin/Themes/Asriel Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Blue Chicago Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Blue Stripes Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Cow Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Emilia Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Frozen Winter Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Gold Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Green Wolf Theme.zip
    .zip
  • Auto_In.bmp
  • Button_Clicked.bmp
  • Button_Hover.bmp
  • Button_Idle.bmp
  • Config.txt
  • Google_Drive_In.bmp
  • Hide_Side.bmp
  • Krystal_In.bmp
  • MainUi.bmp
  • S_Button_Clicked.bmp
  • S_Button_Hover.bmp
  • S_Button_Idle.bmp
  • Save_In.bmp
  • TextBox.bmp
  • Wofly_In.bmp
  • WordWrap_In.bmp
  • bin/Themes/Kakarot Theme.zip
    .zip
  • bin/Themes/Original.zip
    .zip
  • bin/Themes/Rc7 Classic Wolf Rework.zip
    .zip
  • bin/Themes/Red Carbon Fiber.zip
    .zip
  • bin/Themes/Tabs_back.bmp
  • bin/Themes/default.zip
    .zip
  • bin/Themes/light.zip
    .zip
  • bin/Themes/temp/Auto_In.bmp
  • bin/Themes/temp/Button_Clicked.bmp
  • bin/Themes/temp/Button_Hover.bmp
  • bin/Themes/temp/Button_Idle.bmp
  • bin/Themes/temp/Config.txt
  • bin/Themes/temp/Google_Drive_In.bmp
  • bin/Themes/temp/Hide_Side.bmp
  • bin/Themes/temp/Krystal_In.bmp
  • bin/Themes/temp/MainUi.bmp
  • bin/Themes/temp/S_Button_Clicked.bmp
  • bin/Themes/temp/S_Button_Hover.bmp
  • bin/Themes/temp/S_Button_Idle.bmp
  • bin/Themes/temp/Save_In.bmp
  • bin/Themes/temp/TextBox.bmp
  • bin/Themes/temp/Wofly_In.bmp
  • bin/Themes/temp/WordWrap_In.bmp
  • bin/def/base.txt
  • bin/def/classfunc.txt
  • bin/def/globalf.txt
  • bin/def/globalns.txt
  • bin/def/globalv.txt
  • bin/scripts/!!!!!!!tr0lgui.txt
    .js
  • bin/scripts/!!!!!!!weebgui.txt
    .js
  • bin/scripts/!!!!!!cursegui.txt
    .js
  • bin/scripts/!!!!!rare 1x1x1x1 gui.txt
  • bin/scripts/!!!!FD 1x1x1x1 gui.txt
  • bin/scripts/!!!!fixed grabknife v2.txt
  • bin/scripts/!!!message c00l.txt
  • bin/scripts/666ify.txt
  • bin/scripts/Dick_Gun.txt
  • bin/scripts/FD infyield.txt
    .js
  • bin/scripts/FD topkek v4.txt
    .js
  • bin/scripts/MLG Particles.txt
  • bin/scripts/Raining weed!.txt
  • bin/scripts/Trump Particles.txt
  • bin/scripts/We Are Number 1.txt
  • bin/scripts/annoying dog.txt
  • bin/scripts/anonymous all.txt
  • bin/scripts/another 1x1x1x1.txt
  • bin/scripts/bomb vest.txt
  • bin/scripts/c00l destroyer.txt
  • bin/scripts/c00lgui v3rx.txt
    .js
  • bin/scripts/dubstep gun.txt
  • bin/scripts/duck.txt
  • bin/scripts/elysian admin.txt
    .js
  • bin/scripts/fd xester.txt
  • bin/scripts/game curser gui.txt
  • bin/scripts/hacker particles.txt
  • bin/scripts/hello world.lua
  • bin/scripts/idk.txt
  • bin/scripts/illuminati particles.txt
  • bin/scripts/laugh emote shedletsky sound.txt
  • bin/scripts/message c00l.txt
  • bin/scripts/raining tacos.txt
  • bin/scripts/shedletsky laughing.txt
  • bin/scripts/skeleton skybox.txt
  • bin/vs/base/worker/workerMain.js
    .js
  • bin/vs/basic-languages/bat/bat.js
  • bin/vs/basic-languages/coffee/coffee.js
  • bin/vs/basic-languages/cpp/cpp.js
  • bin/vs/basic-languages/csharp/csharp.js
  • bin/vs/basic-languages/csp/csp.js
  • bin/vs/basic-languages/css/css.js
  • bin/vs/basic-languages/dockerfile/dockerfile.js
  • bin/vs/basic-languages/fsharp/fsharp.js
  • bin/vs/basic-languages/go/go.js
  • bin/vs/basic-languages/handlebars/handlebars.js
    .js
  • bin/vs/basic-languages/html/html.js
    .js
  • bin/vs/basic-languages/ini/ini.js
  • bin/vs/basic-languages/java/java.js
  • bin/vs/basic-languages/less/less.js
  • bin/vs/basic-languages/lua/lua.js
  • bin/vs/basic-languages/markdown/markdown.js
    .js
  • bin/vs/basic-languages/msdax/msdax.js
  • bin/vs/basic-languages/mysql/mysql.js
  • bin/vs/basic-languages/objective-c/objective-c.js
  • bin/vs/basic-languages/pgsql/pgsql.js
  • bin/vs/basic-languages/php/php.js
  • bin/vs/basic-languages/postiats/postiats.js
  • bin/vs/basic-languages/powershell/powershell.js
  • bin/vs/basic-languages/pug/pug.js
  • bin/vs/basic-languages/python/python.js
  • bin/vs/basic-languages/r/r.js
  • bin/vs/basic-languages/razor/razor.js
    .js
  • bin/vs/basic-languages/redis/redis.js
  • bin/vs/basic-languages/redshift/redshift.js
  • bin/vs/basic-languages/ruby/ruby.js
  • bin/vs/basic-languages/rust/rust.js
  • bin/vs/basic-languages/sb/sb.js
  • bin/vs/basic-languages/scss/scss.js
  • bin/vs/basic-languages/solidity/solidity.js
  • bin/vs/basic-languages/sql/sql.js
  • bin/vs/basic-languages/st/st.js
  • bin/vs/basic-languages/swift/swift.js
  • bin/vs/basic-languages/vb/vb.js
  • bin/vs/basic-languages/xml/xml.js
  • bin/vs/basic-languages/yaml/yaml.js
  • bin/vs/editor/contrib/suggest/media/String_16x.svg
  • bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • bin/vs/editor/editor.main.css
  • bin/vs/editor/editor.main.js
    .js
  • bin/vs/editor/editor.main.nls.de.js
  • bin/vs/editor/editor.main.nls.es.js
  • bin/vs/editor/editor.main.nls.fr.js
  • bin/vs/editor/editor.main.nls.it.js
  • bin/vs/editor/editor.main.nls.ja.js
  • bin/vs/editor/editor.main.nls.js
  • bin/vs/editor/editor.main.nls.ko.js
  • bin/vs/editor/editor.main.nls.ru.js
  • bin/vs/editor/editor.main.nls.zh-cn.js
  • bin/vs/editor/editor.main.nls.zh-tw.js
  • bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • bin/vs/language/css/cssMode.js
    .js
  • bin/vs/language/css/cssWorker.js
    .js
  • bin/vs/language/html/htmlMode.js
    .js
  • bin/vs/language/html/htmlWorker.js
    .js
  • bin/vs/language/json/jsonMode.js
    .js
  • bin/vs/language/json/jsonWorker.js
    .js
  • bin/vs/language/typescript/lib/typescriptServices.js
    .js
  • bin/vs/language/typescript/tsMode.js
    .js
  • bin/vs/language/typescript/tsWorker.js
    .js
  • bin/vs/loader.js
    .js
  • gamesense_api.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • leiame.txt
  • qdRFzx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections