General
-
Target
https://cdn.discordapp.com/attachments/1200490891303993404/1208738345752993792/DIscord.rar?ex=65e4604e&is=65d1eb4e&hm=61d11cf1e166885afa0bde833bfc9206cbfe5516d1b79938e578a0e0a2f44f5d&
-
Sample
240218-npxwsahh94
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1200490891303993404/1208738345752993792/DIscord.rar?ex=65e4604e&is=65d1eb4e&hm=61d11cf1e166885afa0bde833bfc9206cbfe5516d1b79938e578a0e0a2f44f5d&
Resource
win10-20240214-en
Malware Config
Extracted
discordrat
-
discord_token
MTE5Mzg0MDE2Mzk5OTIwMzQxOQ.GqUhuS.yhPff8ToGXMvkbguY_AEuIPXoE6o8wqnpo4qjM
-
server_id
1201849627633266688
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1200490891303993404/1208738345752993792/DIscord.rar?ex=65e4604e&is=65d1eb4e&hm=61d11cf1e166885afa0bde833bfc9206cbfe5516d1b79938e578a0e0a2f44f5d&
Score10/10-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-