discordrat | Discord rat[.]exe | Triage

Sharing

General

Target

Discord rat.exe
Size

91KB
MD5

80048059f4ed134be347f0544c5fd64e
SHA1

fc99f4158fa9930a0fb556ff4613d922badf8b1a
SHA256

84e09deed55461265fda7225702e139389a1f3a76c0918e0901e31ba60c11513
SHA512

4bb746d0218c879d0993fafcd43ec1b18e31b0d21115713830e8567e5d91fecec70620f3e2faee632fea0d3fb201b61df12e48fa82ebaa20737df2e1faa3f2a4
SSDEEP

1536:GXKQ2FNJQ4FLHv1xCtRE9PLlX/k0SbIANrRW+uexCxoKV6+f2EnR:xQsDQ4FLHKTE9D5/ZSbIANrw+bS2c

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAANkquobZQzEeoYHKoo4wB7AAAAAACAAAAAAAQZgAAAAEAACAAAACemkp4iDrsoXJPzkokwYj0Gy59zv3FWRLnEOEDwykvYgAAAAAOgAAAAAIAACAAAADDrPXhbmFp93CKXINBvLA1vKOVSp8IEn69nPBtLXvnX1AAAADZ/rJIfqLOheV2wzVnC3woWJp4CbP6wPZmNKBNnTXxZdzTSH7343+anM6AP6Fc1BgZ996IaIUGayXGxPss5H/Y+RbPwPvykaYYIk48wX6gskAAAABGnm+P5BLnHkrzjmHNSj9Iuw0yVmhvXMofO7NUSZ4KB89EZmm/RKbt7e9VwRtZlQO+AUVImWDOUdVgj90CeIJe
server_id
1314272379903414344

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Discord rat.exe

Files

Discord rat.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jerem\Desktop\Discord-RAT-2.0-master\Discord rat\obj\Debug\Discord rat.pdb

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ