General

  • Target

    virus.rar

  • Size

    16.1MB

  • MD5

    1f1227c4f5adbd1bbd0da542d65cb9bd

  • SHA1

    391ec5b53a1010dbddbef355fb3908f9f397e644

  • SHA256

    2ecbb7bc7319ecdcb2d9d4bbf38deabd2a3a93999e02f595d9413bb4b9767171

  • SHA512

    44ded61a2fd0ca3c3b053fe494c2814e9040ee764ab9787339f8d24950ddeb47323d3b9dfe51d3732b79fe9279de950b8059f0cb020d94898442c043e45da945

  • SSDEEP

    393216:jUWz9Iz3I9sGLyR5No1JOPww0rZ0jJ7ksBQwdr381J+TEhVDtaxpr5:84ZmnmwwwjzQwdHjH9

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMyMzg2NTkxNDI4NjAxODY2NQ.GWEzhT.LfNT1TRxrNi0wH4g7-xuQFdnyioFM2jNkyqNMk

  • server_id

    1323845201596387451

Signatures

  • Discordrat family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.rar
    .rar
  • virus/Virus.exe
    .exe windows:5 windows x64 arch:x64

    b1c5b1beabd90d9fdabd1df0779ea832


    Headers

    Imports

    Sections

  • virus/resources/Discord.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • virus/resources/Gen.exe
    .exe windows:6 windows x64 arch:x64

    f0486e7e054aa57188c99b0f71783b75


    Headers

    Imports

    Exports

    Sections

  • virus/resources/nitro.py