Overview

overview

10

Static

static

10

backdoor.exe

windows7-x64

10

backdoor.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    backdoor.exe

  • Size

    78KB

  • Sample

    240526-b7l6saae2w

  • MD5

    9553a880a3c466fa75a66e0c39227e12

  • SHA1

    792c1dad18fb2cbcec2d481521562f03ef87a349

  • SHA256

    2b10f66d9a5a6e56e89b939b3606ebb628035a96ea64fc45f792ecc59b30d286

  • SHA512

    0abe8444f4d80f6e40571a7e12340043a7ee42aafb8fae20f5d86c40c2429527c4d4def9a71965fd861474aee7a0d4bbc6c230400bb3eee39d37bb2145a83099

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI0NDA5NTY1ODUwNDM1OTk3Ng.GTDu8V.pnAIDXNTNWIQchltJK15s3stoHuo5RxHsi9AYg

  • server_id

    1244095541626015796

Targets

    • Target

      backdoor.exe

    • Size

      78KB

    • MD5

      9553a880a3c466fa75a66e0c39227e12

    • SHA1

      792c1dad18fb2cbcec2d481521562f03ef87a349

    • SHA256

      2b10f66d9a5a6e56e89b939b3606ebb628035a96ea64fc45f792ecc59b30d286

    • SHA512

      0abe8444f4d80f6e40571a7e12340043a7ee42aafb8fae20f5d86c40c2429527c4d4def9a71965fd861474aee7a0d4bbc6c230400bb3eee39d37bb2145a83099

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

    Score
    10/10
    discordratpersistenceratrootkitstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks