Analysis
- max time kernel
93s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
03/04/2024, 16:49
General
- Target Client-built.exe
- Size 78KB
- Sample240403-vbp3cafh95
- SHA256 9e8edee923883b68ac2202da754a82e38f073594ab0881c4363c3afdd3e21c9c
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTIyNTEyNDczMjc5NDQzNzcxNA.G65c4P.4ewW0EqddWRZTMmXyWCauBuqjk_phtjLZwJiCY
-
server_id
1225115386102550651
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4836-0-0x000001B823610000-0x000001B823628000-memory.dmp
memory/4836-1-0x000001B83DD20000-0x000001B83DEE2000-memory.dmp
memory/4836-2-0x00007FFE2D4D0000-0x00007FFE2DF91000-memory.dmp
memory/4836-3-0x000001B823A30000-0x000001B823A40000-memory.dmp
memory/4836-4-0x000001B83E520000-0x000001B83EA48000-memory.dmp
memory/4836-5-0x00007FFE2D4D0000-0x00007FFE2DF91000-memory.dmp
memory/4836-6-0x000001B823A30000-0x000001B823A40000-memory.dmp