General

  • Target

    setup.exe

  • Size

    78KB

  • Sample

    240203-1566lsbcb3

  • MD5

    8d6cea0f7a64c26d8d22250c7a17d2fd

  • SHA1

    57d4d366e98fc1729e7fe8add0dfc6499afa43ca

  • SHA256

    c7ad4ad2f1ccbedd7fbf3686498c9ac1e2271e9114ac021d19c4aead0010c5de

  • SHA512

    26728d249fd8f264599eb0fb4ca14f1cc05d4e30b5ec133b807b084dad479bad222ed1b56826481cc87c981d962445880caa62a77d1c55187eb722077eb21bc1

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+OPIC:5Zv5PDwbjNrmAE+qIC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTIwMzM5NjM1ODY0ODg4OTM5NQ.GDjDYf.yPuv83jRl-ogfLDDSOxUfSH4Zd6L9Vap9lgy-w

  • server_id

    1203395716123332739

Targets

    • Target

      setup.exe

    • Size

      78KB

    • MD5

      8d6cea0f7a64c26d8d22250c7a17d2fd

    • SHA1

      57d4d366e98fc1729e7fe8add0dfc6499afa43ca

    • SHA256

      c7ad4ad2f1ccbedd7fbf3686498c9ac1e2271e9114ac021d19c4aead0010c5de

    • SHA512

      26728d249fd8f264599eb0fb4ca14f1cc05d4e30b5ec133b807b084dad479bad222ed1b56826481cc87c981d962445880caa62a77d1c55187eb722077eb21bc1

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+OPIC:5Zv5PDwbjNrmAE+qIC

    • Discord RAT

      A RAT written in C# using Discord as a C2.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks