discordrat | fa7cb5330959d52657751fe369325137d5c365dccc134250c416c5df4bc40af8 | Triage

Resubmissions

Sharing

General

Target

8QER18Z.exe
Size

78KB
Sample

240607-l44xjaff77
MD5

a21c551ff256092e5cdd022fb21ef222
SHA1

1914720ef2d9e57e1df8bddbe31a7f27223e0734
SHA256

fa7cb5330959d52657751fe369325137d5c365dccc134250c416c5df4bc40af8
SHA512

4127c13603d0f8c5aa804373d5080d74e1e91cfb6ae0f3d8bbe7bceb41345bffec03f519c9186a689c443144afaa69bd8a0b07fa6bb01d1426d5ae1b4573e1c5
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+1PIC:5Zv5PDwbjNrmAE+lIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0MzQ4NjYwMDI2NTIwMzgxMw.GFMHDI.ux9Qi4OCEE_KLWWm4QZhKeMVsEu7ct9NCw5ZxY
server_id
1243486320794402826

Targets

- Target
  
  8QER18Z.exe
- Size
  
  78KB
- MD5
  
  a21c551ff256092e5cdd022fb21ef222
- SHA1
  
  1914720ef2d9e57e1df8bddbe31a7f27223e0734
- SHA256
  
  fa7cb5330959d52657751fe369325137d5c365dccc134250c416c5df4bc40af8
- SHA512
  
  4127c13603d0f8c5aa804373d5080d74e1e91cfb6ae0f3d8bbe7bceb41345bffec03f519c9186a689c443144afaa69bd8a0b07fa6bb01d1426d5ae1b4573e1c5
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+1PIC:5Zv5PDwbjNrmAE+lIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer