Behavioral task
behavioral1
Sample
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe
Resource
win10v2004-20241007-en
General
-
Target
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe
-
Size
78KB
-
MD5
74690cdf2edc26f42d100325241e1117
-
SHA1
6905ea513cf4a9fcf94f5efff1933fdaf5e980f5
-
SHA256
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4
-
SHA512
1af915c6d421e5a3bb003985e513eaeb9a101a2006a2e338ae172da145ad98b2139bbca7e42a18b926ed7b489f6dcb347e85e6695f2f60ac7f80b0816110f255
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC
Malware Config
Extracted
discordrat
-
discord_token
MTIwMjY2NDA1NTE5ODg0NzAzNw.GBgvm-.FTCvKdBZdhUCywGcaCtSocdcqrjxGR0rEILNeA
-
server_id
1202543313526464574
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe
Files
-
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ