Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

10

Client-built.exe

windows10-2004-x64

10

invite-yourself.py

windows7-x64

3

invite-yourself.py

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    release.rar

  • Size

    26KB

  • Sample

    240523-sjjt7afd46

  • MD5

    3fb97ba907e354b7be965c2134bd3a6f

  • SHA1

    d5f0d7da068f345fb36755287e94465a7ffb7b98

  • SHA256

    b20506eb3b8da2b97259b48af3b300870ae20995d3c1f05c203eff73c9bde8c2

  • SHA512

    8e1d3bb4a980b9d3203f7e18ac8f1390c20a5da4cb803c1fb1473f8175868d779e952ab6bf4d9fe486fc056f1df68fabc32359e1a628ba650a50bf085eb0cb47

  • SSDEEP

    384:QP9YI/BNYAeqyAdQ4Wi/3UejhN2/padrl3PL5yOjzlIxFROCoYS45RFjeem2Z4oM:QPqgc1Ap/bNIpI9R1iKnWjRmtolz2Nn

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI0Mjg1MDk4NTg3Nzk2Njk4MQ.G0Waz3.y89y4wvxDnICewngCCu5gBaewpajwh45av-jE8

  • server_id

    1242851356293992600

Targets

    • Target

      Client-built.exe

    • Size

      78KB

    • MD5

      33f218bd11394698c4448e7ffa84c254

    • SHA1

      f2a05b616b318007daf0cde3f938a706aeb27cde

    • SHA256

      712a42256cf7c2f28f3830dc2f75ee733da382fbe9d5aa16c6d725e893309e5a

    • SHA512

      94f339fd837b8529594c76c777a12da45066a99c4f047cd124d8465e3eaef7029e75a625eccf68e91bdb29c1ad2b827faaa005306de07fa28898f2dcfa6b5866

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC

    Score
    10/10
    discordratpersistenceratrootkitstealer
    behavioral1behavioral2

    • Target

      invite-yourself.py

    • Size

      374B

    • MD5

      b34c0d75548cba5853438f9dab6075fb

    • SHA1

      241221aaa190c05242e073d11bef5efd3236a7df

    • SHA256

      9340ba5621d0b45d84a9817222be9431e2ce9cb8ae6421753e0ae86c387bb357

    • SHA512

      2fa00700fd11dcbf2a6dd6ecb7ee9255bad06a946869b1e06208705f8b73765b63783df01ce8f66b7a34f522ef7f242da2fe33259a7f14a92ece8bcdeafac0dd

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks