discordrat | 2b10f66d9a5a6e56e89b939b3606ebb628035a96ea64fc45f792ecc59b30d286 | Triage

Sharing

General

Target

backdoor.exe
Size

78KB
Sample

240526-b7l6saae2w
MD5

9553a880a3c466fa75a66e0c39227e12
SHA1

792c1dad18fb2cbcec2d481521562f03ef87a349
SHA256

2b10f66d9a5a6e56e89b939b3606ebb628035a96ea64fc45f792ecc59b30d286
SHA512

0abe8444f4d80f6e40571a7e12340043a7ee42aafb8fae20f5d86c40c2429527c4d4def9a71965fd861474aee7a0d4bbc6c230400bb3eee39d37bb2145a83099
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0NDA5NTY1ODUwNDM1OTk3Ng.GTDu8V.pnAIDXNTNWIQchltJK15s3stoHuo5RxHsi9AYg
server_id
1244095541626015796

Targets

- Target
  
  backdoor.exe
- Size
  
  78KB
- MD5
  
  9553a880a3c466fa75a66e0c39227e12
- SHA1
  
  792c1dad18fb2cbcec2d481521562f03ef87a349
- SHA256
  
  2b10f66d9a5a6e56e89b939b3606ebb628035a96ea64fc45f792ecc59b30d286
- SHA512
  
  0abe8444f4d80f6e40571a7e12340043a7ee42aafb8fae20f5d86c40c2429527c4d4def9a71965fd861474aee7a0d4bbc6c230400bb3eee39d37bb2145a83099
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer