Analysis
- max time kernel
1386s - max time network
1173s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
- submitted
10/05/2024, 15:58
General
- Target TTcookie-logger.exe
- Size 78KB
- Sample240510-teng9agh86
- SHA256 5d479409b9aa282cc43dbfcfbe7d15cfca5e79edbbeda79f709e75f30f7f4f47
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTE4NjM5MzkwMzUxMTkxNjU3Ng.GIC61W.1ccuZj312DIk6GWLRHXPayE4UH8OXyees3gdAk
-
server_id
1186393572006707314
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TTcookie-logger.exe"C:\Users\Admin\AppData\Local\Temp\TTcookie-logger.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4304-1-0x00007FFB5AE73000-0x00007FFB5AE75000-memory.dmp
memory/4304-0-0x0000028B03BE0000-0x0000028B03BF8000-memory.dmp
memory/4304-2-0x0000028B1E200000-0x0000028B1E3C2000-memory.dmp
memory/4304-3-0x00007FFB5AE70000-0x00007FFB5B931000-memory.dmp
memory/4304-4-0x0000028B1EB40000-0x0000028B1F068000-memory.dmp
memory/4304-5-0x00007FFB5AE70000-0x00007FFB5B931000-memory.dmp