discordrat | 7af49774624d96177267968f3e70ac2b1f44d173126645bcb865da26aafd9802 | Triage

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

240212-yvx4vadb48
MD5

5b5cda7bc27c1c050989cb1be3784ac1
SHA1

64b084d9060d7669e1ac1bd96f6d3c4a0ec685b6
SHA256

7af49774624d96177267968f3e70ac2b1f44d173126645bcb865da26aafd9802
SHA512

b1f0e9fbc38f26d8c6a2be602be0a9462f4e918ebec0bb5e599255bbc24a08c60f7ea60d6187c0a539349df5912240a8213a562565e3023bbc1f8e12aea15f20
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ZPIC:5Zv5PDwbjNrmAE+pIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTE5Nzc1Mjg0MjE0OTE3NTM5Ng.GlWCBd.YLtVhhqzYTWG0vAKNVTj89COQVP8dXgeVWv66o
server_id
1197753054427103322

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  5b5cda7bc27c1c050989cb1be3784ac1
- SHA1
  
  64b084d9060d7669e1ac1bd96f6d3c4a0ec685b6
- SHA256
  
  7af49774624d96177267968f3e70ac2b1f44d173126645bcb865da26aafd9802
- SHA512
  
  b1f0e9fbc38f26d8c6a2be602be0a9462f4e918ebec0bb5e599255bbc24a08c60f7ea60d6187c0a539349df5912240a8213a562565e3023bbc1f8e12aea15f20
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ZPIC:5Zv5PDwbjNrmAE+pIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer