Overview

overview

10

Static

static

10

disable_infection.exe

windows7-x64

10

disable_infection.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    disable_infection.exe

  • Size

    78KB

  • Sample

    240618-jqez5stfpg

  • MD5

    5680a6247bf2ac6bd97f463863b3790c

  • SHA1

    6a18553f769b60cc23b7fe5c87f3fcc1de060d36

  • SHA256

    6fbb1c25814dd749fb423bc4f9bca99919030278a27ca09b9f997b3ef84d3c1d

  • SHA512

    9ccdd13ab4d40542c4f38c6cee4553d7179d08b7e4926170fb582a6f6303e9c2358538f2b5b936e3112943b0df394c08350cc4b35e64c93c2831a8ceec738a18

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI1MTE4NjM4OTk1MzgxMDQ5NQ.GcIZgp.AMqtZCZqZtUob-d3gzU2LOM5ax5FJRSnHAEFIA

  • server_id

    1250120108064378900

Targets

    • Target

      disable_infection.exe

    • Size

      78KB

    • MD5

      5680a6247bf2ac6bd97f463863b3790c

    • SHA1

      6a18553f769b60cc23b7fe5c87f3fcc1de060d36

    • SHA256

      6fbb1c25814dd749fb423bc4f9bca99919030278a27ca09b9f997b3ef84d3c1d

    • SHA512

      9ccdd13ab4d40542c4f38c6cee4553d7179d08b7e4926170fb582a6f6303e9c2358538f2b5b936e3112943b0df394c08350cc4b35e64c93c2831a8ceec738a18

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

    Score
    10/10
    discordratpersistenceratrootkitstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks