Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20250314-en
General
-
Target
250331-sesarsste1_pw_infected.zip
-
Size
28KB
-
MD5
0fc520d37a2f7908364c91d9bda7e26f
-
SHA1
b074fe0e8dc8de637fea4c97bfbce0597293258e
-
SHA256
41dd10f555a42b65726a755e7bdac4928b35a5151cf3ab30cae7a42738a631e2
-
SHA512
1932027b661449d6b80d6862c217f191617b66ab5bec3173738a88d87065a0358f24f9d478498cc0ce752c7cf5b44e94beee1fbdd518a2c811b1f319235dd29f
-
SSDEEP
384:Sm/e457aaBQFiZ83EBfhbKG9XVg9kI4sFTUNX/7bjKbPYrXzxML8P+WTnH56/KOf:Smx7MZ30hbKWY9MbzrXGL8pnZ6yfKB
Malware Config
Extracted
discordrat
-
discord_token
MTM1NjI4MTg2NTE3ODMxNjgyMA.GeoxaT.ocqOcSIpXr6UreUuaB7hoXHmcnhfEknTw6-SuE
-
server_id
1356279473779245056
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Client-built.exe
Files
-
250331-sesarsste1_pw_infected.zip.zip
Password: infected
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ