General

  • Target

    250331-sesarsste1_pw_infected.zip

  • Size

    28KB

  • MD5

    0fc520d37a2f7908364c91d9bda7e26f

  • SHA1

    b074fe0e8dc8de637fea4c97bfbce0597293258e

  • SHA256

    41dd10f555a42b65726a755e7bdac4928b35a5151cf3ab30cae7a42738a631e2

  • SHA512

    1932027b661449d6b80d6862c217f191617b66ab5bec3173738a88d87065a0358f24f9d478498cc0ce752c7cf5b44e94beee1fbdd518a2c811b1f319235dd29f

  • SSDEEP

    384:Sm/e457aaBQFiZ83EBfhbKG9XVg9kI4sFTUNX/7bjKbPYrXzxML8P+WTnH56/KOf:Smx7MZ30hbKWY9MbzrXGL8pnZ6yfKB

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTM1NjI4MTg2NTE3ODMxNjgyMA.GeoxaT.ocqOcSIpXr6UreUuaB7hoXHmcnhfEknTw6-SuE

  • server_id

    1356279473779245056

Signatures

  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250331-sesarsste1_pw_infected.zip
    .zip

    Password: infected

  • Client-built.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections