discordrat | AIMr[.]zip

General

Target
AIMr.zip
Size 28KB
Sample241216-e67ymswkhl
SHA256 6320da463ff49f3b80eeb9b96a8bbfc71b430e4482b94d383fd3862490a5d13f
MD5 aae42972c1e1c843f3f71d35b0caa444
SHA1 58c2a05f22cc3439b66262ba8c19417eca4a59fa
SHA512 4efdd7667c3f15ea072806e6788834e33df81989cf28bffb8400a0d4cd4b4f74e65aec709187154a974dbcac6ca1ee6b0d89bda51a47154215b9a06a86832321
SSDEEP 768:4JbueZxb6kkmJIK2FAgVZ1TDOGAWNloIvE:4LOne0D4GZzK
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
ODgxNzQzODc5NTAwNTk5MzM3.Gz4jXn.nabvUjO4zX_jYK_mdMBrfdMRfCB5q240mJH-vo
server_id
1310387822045171713

Signatures

Discordrat family
discordrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AIMr.exe

File Explorer

AIMr.zip

.zip 28KB
AIMr.exe

.exe 78KB

AIMr.zip

SHA256 6320da463ff49f3b80eeb9b96a8bbfc71b430e4482b94d383fd3862490a5d13f
MD5 aae42972c1e1c843f3f71d35b0caa444
SHA1 58c2a05f22cc3439b66262ba8c19417eca4a59fa
SHA512 4efdd7667c3f15ea072806e6788834e33df81989cf28bffb8400a0d4cd4b4f74e65aec709187154a974dbcac6ca1ee6b0d89bda51a47154215b9a06a86832321
SSDEEP 768:4JbueZxb6kkmJIK2FAgVZ1TDOGAWNloIvE:4LOne0D4GZzK
MD5 SHA1 SHA512 SSDEEP

AIMr.exe

SHA256 07c46b658c76254d83cccd35b28ee12f948ec01b1e24b12eefe4d93752ddb8a1
MD5 67e0e6dc1dab2b50e036948470c1bf5f
SHA1 f77d90748617aa516d95f06a6ef4fa511d9739fe
SHA512 76b30103fa0612c11044543d5be4e36ad0340a3f1cdf91955e01911e886b427302dfa56972d9c9e554df8fbd30ae22b48293bd52241215df36a82022aea6959a
SSDEEP 1536:F2WjO8XeEXFd5P7v88wbjNrfxCXhRoKV6+V+rPIC:FZz5PDwbjNrmAE+DIC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing