General

  • Target

    Discord.exe

  • Size

    1.1MB

  • MD5

    ec88bc94b1144c2c56d0a2d629856c05

  • SHA1

    41abf0acfdd3e70bbd34e808ef576e3a8ca7351a

  • SHA256

    fcf21eb97245661c8cb307a80f499c78b427b930c4c39066a9ab4113ab17ce07

  • SHA512

    ce0639f732e4c17224be5a656164e0e04ab05a07578893ff92b3d9d487970d710c936a0c3d72efe6869e8783cd53b433bcdff9e24dace514940b0417f5e0697b

  • SSDEEP

    12288:aRZ+IoG/n9IQxW3OBsee2X+t4RbBFRqNIHxWl1WQVbIkdtYKMX9PxMhq/pJfnQ5x:U2G/nvxW3Ww0tBR81WFKMXlpJxmRYe

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections