Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
04-03-2024 22:57
General
-
Target
Client-built (1).exe
-
Size
78KB
-
MD5
f0f7610e75c179a2c6951dcb0327a620
-
SHA1
2842d19dba4f864b01b0f79099112e3f2270fc73
-
SHA256
982d2af6984f4d174d9ba00b6b548f0d1bd77b6e57e1cd8598cff1b72258e8b4
-
SHA512
d6b8ae30dc6c90395a390291974fb1739e11f07abb28658aca16cf52943889f2dde65348bb4090df6b35675be3328df54d06a486ba9c2554bfeaa5bc31e807bb
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+DPIC:5Zv5PDwbjNrmAE+bIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTA0Mjg5Nzc5NjI4MzUxNTAyMQ.GwLuSI.-JtDOxtUKRFf8CsfEGNc01y0RB5GsjOPPqo0jw
-
server_id
1211783090137997403
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 7 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built (1).exe"C:\Users\Admin\AppData\Local\Temp\Client-built (1).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\notepad.exe"C:\Windows\system32\notepad.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
5.2MB
-
Filesize
10.8MB
-
Filesize
64KB