Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1726s -
max time network
1175s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/03/2024, 20:11
General
-
Target
loader_2.exe
-
Size
78KB
-
MD5
8a589f3e42210082df514a391dba2504
-
SHA1
e19fce95fd5f290a662f56c27514e04c47f6d039
-
SHA256
3d5c8b2b9be2c7ced64510496d5505d4559015e1447d3fc3104ba85585388f03
-
SHA512
ab695a36504ae2abdd02037a013a4d071a9be67ab4888ff702bef28c6ce10f067ae3d8e25656040c1aaa77b2c8d47b047111107726d470630dbd9c3a0a3a328c
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+fPIC:5Zv5PDwbjNrmAE+nIC
Malware Config
Extracted
discordrat
-
discord_token
MTIxMDkyMzUxNDE4MjI0NjQ1MA.GiQMuI.85OPf3QTo_nYWna8A66n8603KqxVmAnpz5jufE
-
server_id
1207774102274703391
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\loader_2.exe"C:\Users\Admin\AppData\Local\Temp\loader_2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD56e889b1dccc1fa03dfef75f64770d737
SHA14af10a25809fee3fe761699a799deb0d17ef6a62
SHA25609e8163be2527484183c592fd5f2859168de4e85876178bee13e6ac6e2b298d8
SHA51239de1dbec9a195b32059df3007b1d2b505f5d4ba06e343e470a138d60ffcba1cd09111027f3608ed87320dca3cfd5b213a2491987d62082f90b27049d4da56ab
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
10.8MB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
64KB