General
-
Target
https://cdn.discordapp.com/attachments/1221895306933833802/1221914989120458845/Client-built.rar?ex=66145003&is=6601db03&hm=24212dc7c96b732376241577ae870f3f6f7b9f236eae7b76935274d9191d84ad&
-
Sample
240325-1y6aqscg8t
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1221895306933833802/1221914989120458845/Client-built.rar?ex=66145003&is=6601db03&hm=24212dc7c96b732376241577ae870f3f6f7b9f236eae7b76935274d9191d84ad&
Resource
win10v2004-20240319-en
Malware Config
Extracted
discordrat
-
discord_token
MTIyMTkxMzUyNTI5MTg0MzY4NQ.GEtd5_.rb7YDE3upMpw8BvRznWpPabhFHSx5LUwoSbtkA
-
server_id
1221895306120265778
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1221895306933833802/1221914989120458845/Client-built.rar?ex=66145003&is=6601db03&hm=24212dc7c96b732376241577ae870f3f6f7b9f236eae7b76935274d9191d84ad&
Score10/10-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-