discordrat | 5d1c6f43553cfc3e034cca1ae788ea3cc25eb705e2f65ed1c234b70a42eac245 | Triage

Resubmissions

22/02/2024, 14:30

240222-rvetyabe46 10

22/02/2024, 13:57

240222-q9ft4saf21 10

22/02/2024, 03:12

240222-dp961aba6v 10

Sharing

General

Target

menu.exe
Size

78KB
Sample

240222-dp961aba6v
MD5

94b0cef834e50471c6d2a831aa79504f
SHA1

7618db2ba165475ebf98805a88839d4933cc8708
SHA256

5d1c6f43553cfc3e034cca1ae788ea3cc25eb705e2f65ed1c234b70a42eac245
SHA512

715b1fc4a3986dde8d0c901fed81b2a0241cd0dfc3e1ee04b73a7c2bc676ee5de420c84ab3b728950cdb95b4b0d407846114e811347ce42d3712083d58b45512
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIxMDAzNzcxMDkzNzM5OTMwNw.GD2MsQ.pb4P11_SfSpg7C_ciV50xHdtqk-mTgjk911dQ4
server_id
1210051148896018452

Targets

- Target
  
  menu.exe
- Size
  
  78KB
- MD5
  
  94b0cef834e50471c6d2a831aa79504f
- SHA1
  
  7618db2ba165475ebf98805a88839d4933cc8708
- SHA256
  
  5d1c6f43553cfc3e034cca1ae788ea3cc25eb705e2f65ed1c234b70a42eac245
- SHA512
  
  715b1fc4a3986dde8d0c901fed81b2a0241cd0dfc3e1ee04b73a7c2bc676ee5de420c84ab3b728950cdb95b4b0d407846114e811347ce42d3712083d58b45512
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer