Overview
overview
7Static
static
3DiscordRAT...at.exe
windows7-x64
3DiscordRAT...at.exe
windows10-2004-x64
1DiscordRAT...at.exe
macos-10.15-amd64
1DiscordRAT...er.exe
windows7-x64
7DiscordRAT...er.exe
windows10-2004-x64
1DiscordRAT...er.exe
macos-10.15-amd64
1DiscordRAT...ib.dll
windows7-x64
1DiscordRAT...ib.dll
windows10-2004-x64
1DiscordRAT...ib.dll
macos-10.15-amd64
Static task
static1
Behavioral task
behavioral1
Sample
DiscordRAT_Build-main/Release/Discord rat.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DiscordRAT_Build-main/Release/Discord rat.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
DiscordRAT_Build-main/Release/Discord rat.exe
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
DiscordRAT_Build-main/builder.exe
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
DiscordRAT_Build-main/builder.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
DiscordRAT_Build-main/builder.exe
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
DiscordRAT_Build-main/dnlib.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
DiscordRAT_Build-main/dnlib.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
DiscordRAT_Build-main/dnlib.dll
Resource
macos-20220504-en
General
-
Target
DiscordRAT_Build-main.zip
-
Size
448KB
-
MD5
2c872f60249d147fd2cff9e4f70c564b
-
SHA1
8fd3f767ae28186ffa9e1a845895686c9ac389b4
-
SHA256
013f20bd69a697b452e2461bbab012289cf28398e2590e6d4938ae188330169d
-
SHA512
251836f0b8adb81c289583339ecf704c833489dd118f752ab0f02f910e1d0eb7bb7adc98a3ba2538d1b6147fa250e7f0633aae37ce36fa10c8092632f5d03861
-
SSDEEP
12288:/VCoVD990usfOlCdXXJy1sw5D99GJuY9HArdoU:MoKdpyuw5D9wJWoU
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/DiscordRAT_Build-main/Release/Discord rat.exe unpack001/DiscordRAT_Build-main/builder.exe unpack001/DiscordRAT_Build-main/dnlib.dll
Files
-
DiscordRAT_Build-main.zip.zip
-
DiscordRAT_Build-main/README.md
-
DiscordRAT_Build-main/Release/Discord rat.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
DiscordRAT_Build-main/builder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DiscordRAT_Build-main/dnlib.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ