Analysis
-
max time kernel
133s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04-06-2024 11:30
General
-
Target
Project Ligma.exe
-
Size
78KB
-
MD5
ef8b04b617ece592b13b0b92ce713bb7
-
SHA1
f3edfedc351352d0460cf7ffbba1f0b195e56f33
-
SHA256
c90e3f3f870668887c6a5dbfc49ddaba907bc1ea0c0966ad6249ff0e3eb9869e
-
SHA512
d4d05132622560b506e854aa3798da97379e742f6e3f9d012505621bd28f4b5b2102e555fdf10008f44e4d82f7d07e66c1f2b26e8e238faefebc15f7b963f0bd
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+9PIC:5Zv5PDwbjNrmAE+tIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTExODU4NjMyMTM4MDg1MTc2Mw.GimHVz.Zy6wvVDGcOmDEO7kYdxfHcGYhSCWj8Uq47_2aQ
-
server_id
1118584897725022310
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Project Ligma.exe"C:\Users\Admin\AppData\Local\Temp\Project Ligma.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
8KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
10.8MB