Behavioral task
behavioral1
Sample
f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63.exe
Resource
win10v2004-20250313-en
General
-
Target
f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63.exe
-
Size
78KB
-
MD5
61ab5f0d4c935e070453793da932f876
-
SHA1
5743ae16fdd28ded14d4c6efc9967d520043efb6
-
SHA256
f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63
-
SHA512
818e77611632533b298e07aec26195901aafa0b08a84a1b6ef5199496da1829441373a8d347eafa9d05eef85733a075ad80ad814a339de957f00ee580592b34f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+dPIC:5Zv5PDwbjNrmAE+NIC
Malware Config
Extracted
discordrat
-
discord_token
MTM1Mzk0OTU5MjgwNjQ5MDE4Mw.Ge6xlM.230RZkdbvNS3PW679kyNkZMoIB0mnjgZpxNYsM
-
server_id
1353947596262998036
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63.exe
Files
-
f6c156e58b9fa032e28663d474ec9f747524298781a7df5e29a477b45d51bb63.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ