Behavioral task
behavioral1
Sample
Roblox executor.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
Roblox executor.exe
Resource
win11-20250410-en
Behavioral task
behavioral3
Sample
boostrapper.vbs
Resource
win10v2004-20250314-en
Behavioral task
behavioral4
Sample
boostrapper.vbs
Resource
win11-20250410-en
General
-
Target
luna executor (1).rar
-
Size
28KB
-
MD5
a65062bf1044221314634aa9fafebc6b
-
SHA1
fdcb807290b57f0ebbb9a3bc12792b8a65c1053b
-
SHA256
a000d5b242c287ec8b1897e4e6dda734cc4615e2b7ff3a50440c753d78ce47bc
-
SHA512
074edd1b97d056586eece291c767a10305416059b8e4eadae7172fc16b8e12f692a83cfd5d8e99b6e3e078a6fc46e74732d7d5f4e7d89fcd2f9a1db3f5ae4bcd
-
SSDEEP
384:osYejZmEmE7KXX6cQyztVXgrYINy9HpxDpNYyHkgs+2tjPsQOp1ygR89FoUZq2TV:osxl/66Wub6b1s+SzsR1JRyGObTqc
Malware Config
Extracted
discordrat
-
discord_token
MTM2MjQ4NDQ3NDg1OTc1MzU3Mg.G6F0XN.VLF6L9woFXrcJqvnK2pSc21C4w5iXBv79eVBjs
-
server_id
1362170836378845274
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Roblox executor.exe
Files
-
luna executor (1).rar.rar
-
AssemblyInfo.cs
-
Roblox executor.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
boostrapper.dll.vbs