Overview

overview

10

Static

static

10

DiscordXploit.exe

windows7-x64

10

DiscordXploit.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DiscordXploit.exe

  • Size

    222KB

  • MD5

    b56c44fd1623f7ece09ba38c233cffbb

  • SHA1

    b4127c6a1c0b792d24edde64cd996ea23a830920

  • SHA256

    6a3246d84a7dc156a06120f0d4373661743d748de6109575473adcf5071d6419

  • SHA512

    2453b46f87d2a703bf48dc2f381fc6be43ba4f43d01af5f46c6d769872bec19829ca80112723d5975dc9957082d4544600b09ad852737582259bf0839c101a56

  • SSDEEP

    3072:fUBcxVMWiPMV7uYH1bomQX5RJT/zNkF15g/xIoJzdIXANvoKxVY:fgWiPMVVVb7sR/z0/gfJzdIQNoKL

Score
10/10
ratdefaultasyncratvenomrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

193.161.193.99:49446

Mutex

8735d3c7-a86c-4a5a-b775-0b873f7eb49c

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • VenomRAT 1 IoCs

    Detects VenomRAT.

    rat
  • Venomrat family
    venomrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DiscordXploit.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections