Analysis
-
max time kernel
134s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
29-05-2024 15:18
General
-
Target
Shiba.Gold.Cracker.By.DoomMonkey.exe
-
Size
78KB
-
MD5
5f0c503f9879fdcd0c58d6d25dc11c8e
-
SHA1
ad6a927bfd33a8dc772c6a1cd9380ef6feabd277
-
SHA256
5ac7d084908338850bf604c18e0fa43067b1bc658594c4d4f46efa7e94675885
-
SHA512
aaea53d46fdbe40aeaa4db1766c1a7211da1e995505d237e55906f7a5340dcd1ae59ef0a0a54979be22192e2b9f82a00f397f9801413a49fa0fc6251f7ffb054
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+XPIC:5Zv5PDwbjNrmAE+fIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTIxNzkwODIwODcxMDk3OTU4NA.GJ451F.r77u2gru79ROz_Fr4eZeiUxMHeFR-vOBN8WSeE
-
server_id
1209487993325359134
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Shiba.Gold.Cracker.By.DoomMonkey.exe"C:\Users\Admin\AppData\Local\Temp\Shiba.Gold.Cracker.By.DoomMonkey.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
9.9MB
-
Filesize
5.1MB
-
Filesize
9.9MB