Resubmissions

23-04-2024 02:21

240423-cs8a5sbe89 10

23-04-2024 02:15

240423-cpn34abe65 10

General

  • Target

    XPsycho Cheats.exe

  • Size

    78KB

  • Sample

    240423-cpn34abe65

  • MD5

    acfe98b80f2cc1929151b81428ce26bf

  • SHA1

    3d221a1850320f3a7f996778d5625b6e6fa24f40

  • SHA256

    4f2be08bc6395869cfb71741c4803ce5e8b68fd365bd1d7fe98a7aacee767ae1

  • SHA512

    8f1452f4111f77038048fb3c747fcc9133594e1929c396863b22f36e2aa7bf3aa6e80c8ccafa39f95fe7e90dc5fc031e00b222b548b44c3e3757ccec6f2ac8ba

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTIzMjE0OTc3MzQ5NTMwNDMwNA.Gkp4-u.iV4nsscSdQyxBohbfKg-cwo6OGwImN17S7r0x4

  • server_id

    1232150214391890031

Targets

    • Target

      XPsycho Cheats.exe

    • Size

      78KB

    • MD5

      acfe98b80f2cc1929151b81428ce26bf

    • SHA1

      3d221a1850320f3a7f996778d5625b6e6fa24f40

    • SHA256

      4f2be08bc6395869cfb71741c4803ce5e8b68fd365bd1d7fe98a7aacee767ae1

    • SHA512

      8f1452f4111f77038048fb3c747fcc9133594e1929c396863b22f36e2aa7bf3aa6e80c8ccafa39f95fe7e90dc5fc031e00b222b548b44c3e3757ccec6f2ac8ba

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC

    • Discord RAT

      A RAT written in C# using Discord as a C2.

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks