discordrat | 8fb5c397bfd7f9782487f81a0b22804cfc9221aa3d1120761923aa94038ea4af | Triage

Resubmissions

27-06-2024 12:12

240627-pdplps1bkc 10

27-06-2024 12:10

240627-pb4mva1ale 10

27-06-2024 12:07

240627-pacgzasgrp 10

27-06-2024 12:03

240627-n8jhhasgkj 10

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

240627-pacgzasgrp
MD5

f1a1f289c33b5a94d9fb791b927a5659
SHA1

d88776df9e6f12b350cb289e37812cc531186624
SHA256

8fb5c397bfd7f9782487f81a0b22804cfc9221aa3d1120761923aa94038ea4af
SHA512

e7ce8d194d9b808a224d931131dd8fdd781a93ec765febab2b1a104d131f214059f197d6f09eb1b63345d84f55be06ce93fae12f5a7e992adb74ad05f5b01529
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hPIC:5Zv5PDwbjNrmAE+xIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1NTg1NDczODQ5MTE4MzEzNQ.GaXeok.R9V6gI6ppt9_tFVs1wCBBXJycp_2xYh8oTNn54
server_id
1255855590312382485

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  f1a1f289c33b5a94d9fb791b927a5659
- SHA1
  
  d88776df9e6f12b350cb289e37812cc531186624
- SHA256
  
  8fb5c397bfd7f9782487f81a0b22804cfc9221aa3d1120761923aa94038ea4af
- SHA512
  
  e7ce8d194d9b808a224d931131dd8fdd781a93ec765febab2b1a104d131f214059f197d6f09eb1b63345d84f55be06ce93fae12f5a7e992adb74ad05f5b01529
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hPIC:5Zv5PDwbjNrmAE+xIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer