Behavioral task
behavioral1
Sample
release/Shiroku/shiroku.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
release/Shiroku/shiroku.exe
Resource
win10v2004-20241007-en
General
-
Target
release.rar
-
Size
26KB
-
MD5
a773c87183f7d2056c60131723c8c6a1
-
SHA1
d3bb6314d4475d00b0f1e368a125ef12868649ca
-
SHA256
b232809c8740fa6b6e84b1deb1e93ec69aa49f076808f2fe3aad62e318b11a92
-
SHA512
ed681e0d66f61b02c583f46f19878bee3cb5cc0cd375ae13e5eababf6bd6618287b434303f2389e81501eed26feccfb37f77786dd1b93ab28dba72699fb5afbf
-
SSDEEP
768:AqgcuizhtNIpdKlnf5wPIL6gO8vSdlo2KwrTF:ANezLNIWWiO5o2tF
Malware Config
Extracted
discordrat
-
discord_token
MTMxMTc5NzcwMTMwMTUwNjE4OQ.Gr6F4k.AzdEIVOMlv37_pXR0yfV0reV3jL_xtYZTG3gy4
-
server_id
1311797279790731304
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/release/Shiroku/shiroku.exe
Files
-
release.rar.rar
Password: Un24ar43
-
release/Shiroku/shiroku.exe.exe windows:4 windows x64 arch:x64
Password: Un24ar43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ