discordrat | 924da851c470c6b57bbfde9ee36383c2fa4f4d27e7948b91fbf2ede2839b6aad | Triage

Resubmissions

19/02/2024, 16:48

240219-vbfhxahb55 10

19/02/2024, 16:44

240219-t89mksha78 10

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

240219-vbfhxahb55
MD5

eb8348b6736cb45566c720496d15ce4f
SHA1

a871da195e107463c3d705e091dbbe73967aa44d
SHA256

924da851c470c6b57bbfde9ee36383c2fa4f4d27e7948b91fbf2ede2839b6aad
SHA512

11d53ca175cda68a342918c782fde9e7d50135d76a13468de52a89a2b9910a7db7385d63ab37cad594bc2ecd4f3f191b9b04915bb477068cfb2388dfba78244c
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+o9PIC:5Zv5PDwbjNrmAE+otIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTE2MTcxODMxMjE2Njc3Mjc4OA.GzfFXs.vZ1gjACnyFGrF4Kes0GxFlkFKdk_zqAzL8HtgE
server_id
1195408378034409594

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  eb8348b6736cb45566c720496d15ce4f
- SHA1
  
  a871da195e107463c3d705e091dbbe73967aa44d
- SHA256
  
  924da851c470c6b57bbfde9ee36383c2fa4f4d27e7948b91fbf2ede2839b6aad
- SHA512
  
  11d53ca175cda68a342918c782fde9e7d50135d76a13468de52a89a2b9910a7db7385d63ab37cad594bc2ecd4f3f191b9b04915bb477068cfb2388dfba78244c
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+o9PIC:5Zv5PDwbjNrmAE+otIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer