discordrat | e78e743c21357e099190edde23d5e6fb8ffd33c36ea9602777d231a2b4dcc11d | Triage

Sharing

General

Target

AdminMenu_BP.mcaddon
Size

6KB
Sample

240507-ga6f2see43
MD5

61211ef57d6ba766fc8bb61842faf0e1
SHA1

b2bbc5b5e62037b8e3469ebc762e7f6f5a5fba1c
SHA256

e78e743c21357e099190edde23d5e6fb8ffd33c36ea9602777d231a2b4dcc11d
SHA512

afc39b276dc1955ab779d8bd175c8f2983df5169b4921379a0c1a3408955f2c999f746130770927d4e714c172d487f14d050257ab5316e1ebd76298bf21744f5
SSDEEP

192:fJhA/9R7jnk5+INVNVT9SyEgFMNRYS1W1bPbMt5//UahVCjJG:kFRQVNJcyEtYwEPk/UaLCE

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIzNjczNDg0ODUxMzczNjgyNw.GYx9r8.AvmyPnn0sb2NoZijUdM4ZGOUfHrS-MmxJNKUeg
server_id
1214787742026702861

Targets

- Target
  
  AdminMenu_BP.mcaddon
- Size
  
  6KB
- MD5
  
  61211ef57d6ba766fc8bb61842faf0e1
- SHA1
  
  b2bbc5b5e62037b8e3469ebc762e7f6f5a5fba1c
- SHA256
  
  e78e743c21357e099190edde23d5e6fb8ffd33c36ea9602777d231a2b4dcc11d
- SHA512
  
  afc39b276dc1955ab779d8bd175c8f2983df5169b4921379a0c1a3408955f2c999f746130770927d4e714c172d487f14d050257ab5316e1ebd76298bf21744f5
- SSDEEP
  
  192:fJhA/9R7jnk5+INVNVT9SyEgFMNRYS1W1bPbMt5//UahVCjJG:kFRQVNJcyEtYwEPk/UaLCE
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2