Overview

overview

10

Static

static

10

Discord.exe

windows7-x64

10

Discord.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Discord.exe

  • Size

    45KB

  • MD5

    9dcd35fe3cafec7a25aa3cdd08ded1f4

  • SHA1

    13f199bfd3f8b2925536144a1b42424675d7c8e4

  • SHA256

    ce4f85d935fe68a1c92469367b945f26c40c71feb656ef844c30a5483dc5c0be

  • SHA512

    9a4293b2f2d0f1b86f116c5560a238ea5910454d5235aedb60695254d7cc2c3b1cd9dd1b890b9f94249ee0ca25a9fb457a66ca52398907a6d5775b0d2e2b70d3

  • SSDEEP

    768:KuPfZTg4pYiWUU9jjmo2qrGQ6vincPI9rjbQgX3i6cPlSZ8OoriBDZSx:KuPfZTgKa2AKU9/bXXS6ckUrcdSx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

2.tcp.eu.ngrok.io:19695

Mutex

gonq3XlXWgiz

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections