Analysis
- max time kernel
89s - max time network
134s - platform
windows11-21h2_x64 - resource
win11-20240426-en - resource tags
- submitted
19/05/2024, 05:49
General
- Target Anti_Discord_RAT_BETA.exe
- Size 811KB
- Sample240519-gja2hadc65
- SHA256 ba9a3e3afa4e938dc92e32290e731e0e053c978029d1e3fec40dcfd73a8ce5a1
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Anti_Discord_RAT_BETA.exe"C:\Users\Admin\AppData\Local\Temp\Anti_Discord_RAT_BETA.exe"1⤵
- Sets desktop wallpaper using registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4760-0-0x00007FFA0B4D3000-0x00007FFA0B4D5000-memory.dmp
memory/4760-1-0x00000201D2AF0000-0x00000201D2BC0000-memory.dmp
memory/4760-2-0x00000201ED1C0000-0x00000201ED382000-memory.dmp
memory/4760-3-0x00007FFA0B4D0000-0x00007FFA0BF92000-memory.dmp
memory/4760-4-0x00000201EE790000-0x00000201EECB8000-memory.dmp
memory/4760-5-0x00007FFA0B4D3000-0x00007FFA0B4D5000-memory.dmp
memory/4760-6-0x00007FFA0B4D0000-0x00007FFA0BF92000-memory.dmp