Behavioral task
behavioral1
Sample
189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051.exe
Resource
win10v2004-20241007-en
General
-
Target
189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051
-
Size
78KB
-
MD5
7df646d7e240335e6521ee91d890ec4f
-
SHA1
cf40fc9613f998b812bebb8e2ef92d197c2bc290
-
SHA256
189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051
-
SHA512
a054a08de1a599788156e2bbb6fd9dd8132a517ac683a4da54ed5d54fc64f0f3e72d810b5ec196ff12b9cd2993a0448fd97d6c791a804a825a92e19aa1e0a385
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+uPIC:5Zv5PDwbjNrmAE+KIC
Malware Config
Extracted
discordrat
-
discord_token
MTMyMTE2Mzk1MTU5NzE1ODQ4MA.GATWmz.qBhTuxTj7H-lFM4Qiw6R3YKhhhQWW7_MiEQ3Yo
-
server_id
1321164622329544734
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051
Files
-
189363b4c4cd0d4c9b4dd7c20177dc0eec8942dbf164aa8c6ca1227e6ff0f051.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ