discordrat | hxxps://filetransfer[.]io/data-package/g83ORAG3#link | Triage

Resubmissions

01-05-2024 15:23

240501-ssgfesca99 1

22-04-2024 08:54

240422-kvcw1shf99 10

22-04-2024 08:50

240422-krk38ahf67 10

Sharing

General

Target

https://filetransfer.io/data-package/g83ORAG3#link
Sample

240422-kvcw1shf99

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzMDgwNjQ0NzM2NTk0NzQ1Ng.G2vGiE.8f97-UjGmmPjSih2nipyB83KB174hMORkyul_0
server_id
1229126898051973120

Targets

- Target
  
  https://filetransfer.io/data-package/g83ORAG3#link
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

discordratpersistenceratrootkitstealer