General

  • Target

    Nixware.zip

  • Size

    440KB

  • MD5

    1239f51775e01fba26731ddae3dcd14c

  • SHA1

    c98f0a358f2d54aad963bb97e30a5da2f4e7b47d

  • SHA256

    83d5fb17ee2380dbc3d6fba61fc880fe85b5bb129ebb4198f8570f33d344cea5

  • SHA512

    ad63cf26de52a919c840a776e63ba04a1952abcdd8db48a395791dc3cc7d1433505a200b55ff2130bb21126f6d53844a95393341b1b9ef71f56daca6c48c5a86

  • SSDEEP

    6144:UPe780iCUaOstC1ps2i0SKPIJyaDGMuC/P+JPFQpcaY0al8ph5kZIiY0yNixArgg:Q0nBlA/s2/SKAMa3h/CzUE8TS5fxtFq

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTAyMTQzMjA3ODQzMDExMzc5Mw.GRS-So.q-fGy4OeZA7_se-xUdFVkaPiNxQJFRukyw9Ofw

  • server_id

    1321113521538203738

Signatures

  • Discordrat family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Nixware.zip
    .zip
  • Nixware Loader.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • READ ME.txt
  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections