discordrat | d56a1643d296616d07291a85c65b5af1189c3f7ac5197534556a168e20c326a4 | Triage

Submit
Reports

Overview

overview

Static

static

loader.exe

windows7-x64

loader.exe

windows10-2004-x64

Sharing

General

Target

loader.exe
Size

78KB
Sample

240520-tcrrwsgh8v
MD5

0fe5eef86f55a197b86a758915f11059
SHA1

2eff191d8f447d999d427fd825a266ab7a0b358e
SHA256

d56a1643d296616d07291a85c65b5af1189c3f7ac5197534556a168e20c326a4
SHA512

7b657babe30b904f48559d5597501dee92b61cc70955008a1007a9e480ddc9cca5d4b2ff1d1ffabc095dfb13478e307519a9f4a276a4bf45eb6b42abf409b23f
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+aPIC:5Zv5PDwbjNrmAE+GIC

Score

10^/10

discordrat persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

loader.exe

Resource

win7-20240508-en

discordrat persistence rat rootkit stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

loader.exe

Resource

win10v2004-20240508-en

discordrat persistence rat rootkit stealer

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0MjA5MzEzMDI2NjgzNzA0Mw.GPiHV0.xzmGeKlEDKXpKijmlwzstJzxgKPWKJkSa-fjRA
server_id
1242093566004822039

Targets

- Target
  
  loader.exe
- Size
  
  78KB
- MD5
  
  0fe5eef86f55a197b86a758915f11059
- SHA1
  
  2eff191d8f447d999d427fd825a266ab7a0b358e
- SHA256
  
  d56a1643d296616d07291a85c65b5af1189c3f7ac5197534556a168e20c326a4
- SHA512
  
  7b657babe30b904f48559d5597501dee92b61cc70955008a1007a9e480ddc9cca5d4b2ff1d1ffabc095dfb13478e307519a9f4a276a4bf45eb6b42abf409b23f
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+aPIC:5Zv5PDwbjNrmAE+GIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.