General
-
Target
OXYGEN-main.zip
-
Size
28KB
-
Sample
240302-tjeqxaeg4s
-
MD5
866dc788568230c2dd87fa9346399680
-
SHA1
916629af65bd029b283bcbf7382cc960fb14550b
-
SHA256
b8742c104121b89b3c4500e9eb4ba5da82f3c94b33f7499dd5631391a94e1ca5
-
SHA512
2a9bc94933b935bff073473c399d59f9c67c769a47d0d2b36601f25ea276cad4dc731930a9445031f3fdd660fd1bffada8b25fbea043bebb8a6dd26e3ed367e7
-
SSDEEP
768:Z5lz6yZDgr9OtA8dozkScWvSetkjQeKNy6Ro:Zd2rCSFGQeIdo
Malware Config
Extracted
discordrat
-
discord_token
MTE5NzkyMTQ2MDE3NDQ2NzE1Mg.G10JF-.bNlt2_PKNFUbG2pRSlM23bcrdFtXhvMU_yl7hY
-
server_id
1052631250457866370
Targets
-
-
Target
Oxygen/OXYGEN.exe
-
Size
78KB
-
MD5
da5a7eb9e117cafa2d9137d1723a33dd
-
SHA1
e35b1f51e72ef5d2f8290ac7d0ec87cc15235899
-
SHA256
780815f7b1197e89dd796f625782af49026bc7691fd686eb25f3f9ab2002579a
-
SHA512
4686f8d49b4ca27c1ca4bccdfaad7c8369e475cdc1b59a9ac5af10dc5382d449c60daa993d9311dd2e70a3ee535449705665699691a3bd8bafd37ebd075fd7af
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+cPIC:5Zv5PDwbjNrmAE+QIC
Score10/10-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Legitimate hosting services abused for malware hosting/C2
-