General
-
Target
Client-built.exe
-
Size
78KB
-
Sample
241222-tl9ztssras
-
MD5
41c6413a76f8b505545680879c38175c
-
SHA1
a6269b7b62a50ab43b498d20b9c2a3b5f3530013
-
SHA256
fb15e77decec4da1825309c787978ab7a86003b7bc973697cf8338d560b93798
-
SHA512
933f37ef2be92464b18631aeab619860bbad20f90427784568b9572a682c405bb5306759f50e6ed8d9344451f02ca85709899e09700c0e47657af77363bf49c2
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10ltsc2021-20241211-en
Malware Config
Extracted
discordrat
-
discord_token
MTMyMDQyMjc2NDc2MjM3MDA2OA.GZYyYW.zpYp_zgxGk9hDC_oq1XNVF8hXzUTTzoorEi9JQ
-
server_id
1320420510445736086
Targets
-
-
Target
Client-built.exe
-
Size
78KB
-
MD5
41c6413a76f8b505545680879c38175c
-
SHA1
a6269b7b62a50ab43b498d20b9c2a3b5f3530013
-
SHA256
fb15e77decec4da1825309c787978ab7a86003b7bc973697cf8338d560b93798
-
SHA512
933f37ef2be92464b18631aeab619860bbad20f90427784568b9572a682c405bb5306759f50e6ed8d9344451f02ca85709899e09700c0e47657af77363bf49c2
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
-
Discordrat family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Downloads MZ/PE file
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-