Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
10/03/2024, 02:50
General
- Target Client-built.exe
- Size 78KB
- Sample240310-dbm5baae49
- SHA256 52806733876487d323b3bf9e9db60fc7600f75e4fa104ec6f7a469566b0613c6
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
2c063a195a76d80aa1582cb5cab8075c1628d5a3b7bb597316787d1a12b16175
-
server_id
1216215871526277180
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2064-0-0x00000273874D0000-0x00000273874E8000-memory.dmp
memory/2064-1-0x00000273A1B30000-0x00000273A1CF2000-memory.dmp
memory/2064-2-0x00007FFD2DB20000-0x00007FFD2E5E1000-memory.dmp
memory/2064-3-0x00000273878A0000-0x00000273878B0000-memory.dmp
memory/2064-4-0x00000273A2330000-0x00000273A2858000-memory.dmp
memory/2064-5-0x00007FFD2DB20000-0x00007FFD2E5E1000-memory.dmp
memory/2064-6-0x00000273878A0000-0x00000273878B0000-memory.dmp