General

  • Target
    jaffacakes118_490eb10f51fdb92a46b3f01fc18bdf0c5de6507bf2f05e40aabf5994c900edac.bin
  • Size 29KB
  • Sample260911-wpyr3sbk6s
  • SHA256 490eb10f51fdb92a46b3f01fc18bdf0c5de6507bf2f05e40aabf5994c900edac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • discordrat

Attributes
  • discord_token

    MTMyODU4MzY1ODk5ODczMDc5NQ.G3BReo.ezXTzi9rRsFzw59lR4ouERd8lIkEOZGKxuWHK4

  • server_id

    1374088984329851030

Signatures

  • Family: Discord RAT

    A RAT written in C# using Discord as a C2.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • jaffacakes118_490eb10f51fdb92a46b3f01fc18bdf0c5de6507bf2f05e40aabf5994c900edac.bin
    .zip 29KB
  • __MACOSX/._ext
    181B
  • __MACOSX/ext/._launch.exe
    181B
  • ext/launch.exe
    .exe 78KB

jaffacakes118_490eb10f51fdb92a46b3f01fc18bdf0c5de6507bf2f05e40aabf5994c900edac.bin

  • SHA256 490eb10f51fdb92a46b3f01fc18bdf0c5de6507bf2f05e40aabf5994c900edac
  • MD5 SHA1 SHA512 SSDEEP TLSH