discordrat | 3f21d81f46de71ea6660ff852480268cde323ab68b3b449c34a2b18f21e75e46 | Triage

Resubmissions

23-04-2024 21:50

240423-1p1c5acb4v 10

23-04-2024 21:36

240423-1f6hsacb68 10

Sharing

General

Target

Sigma.exe
Size

78KB
Sample

240423-1f6hsacb68
MD5

a0433989f33346e8cee2eea36071a7c2
SHA1

d46ae970a1e301dbadbb9516967ba5d434858192
SHA256

3f21d81f46de71ea6660ff852480268cde323ab68b3b449c34a2b18f21e75e46
SHA512

ec9c36066480a976a3700d7021da37688f1f9a608df1dcf3facbec6077729a310acc5cdac22ec60d566cd627831113ec8bff5492a0b989c1058747eb65492f7d
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hrPIC:5Zv5PDwbjNrmAE+JIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzMjE3Nzg0MDk3NjI5ODAyNQ.GAxEYs.EJ_K9VlQJWrmSf9o3vCed38St3du2Nj0wsFLYw
server_id
1232179070591307896

Targets

- Target
  
  Sigma.exe
- Size
  
  78KB
- MD5
  
  a0433989f33346e8cee2eea36071a7c2
- SHA1
  
  d46ae970a1e301dbadbb9516967ba5d434858192
- SHA256
  
  3f21d81f46de71ea6660ff852480268cde323ab68b3b449c34a2b18f21e75e46
- SHA512
  
  ec9c36066480a976a3700d7021da37688f1f9a608df1dcf3facbec6077729a310acc5cdac22ec60d566cd627831113ec8bff5492a0b989c1058747eb65492f7d
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hrPIC:5Zv5PDwbjNrmAE+JIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer