c8de0e92e603214114f8800dd99ecf8cb69ac85caf8010a99ba3f66afe70fcbf

Submit
Reports

Overview

overview

Static

static

Discord-RA...ram.js

windows7-x64

Discord-RA...ram.js

windows10-2004-x64

Discord-RA...er.dll

windows7-x64

Discord-RA...er.dll

windows10-2004-x64

Discord-RA...er.dll

windows7-x64

Discord-RA...er.dll

windows10-2004-x64

Discord-RA...am.dll

windows7-x64

Discord-RA...am.dll

windows10-2004-x64

Discord-RA...it.exe

windows7-x64

Discord-RA...it.exe

windows10-2004-x64

Discord-RA...it.exe

windows7-x64

Discord-RA...it.exe

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...er.ps1

windows7-x64

Discord-RA...er.ps1

windows10-2004-x64

Discord-RA...ser.js

windows7-x64

Discord-RA...ser.js

windows10-2004-x64

Discord-RA...ble.js

windows7-x64

Discord-RA...ble.js

windows10-2004-x64

Discord-RA...eam.js

windows7-x64

Discord-RA...eam.js

windows10-2004-x64

Discord-RA...ull.js

windows7-x64

Discord-RA...ull.js

windows10-2004-x64

Discord-RA...ect.js

windows7-x64

Discord-RA...ect.js

windows10-2004-x64

Discord-RA...tor.js

windows7-x64

Discord-RA...tor.js

windows10-2004-x64

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03-07-2024 03:39

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Discord-RAT-2.0-master/Discord rat/Program.js

Resource

win7-20240221-en

windows7-x64

28 signatures

150 seconds

Behavioral task

behavioral2

Sample

Discord-RAT-2.0-master/Discord rat/Program.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Discord-RAT-2.0-master/Discord rat/Resources/PasswordStealer.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Discord-RAT-2.0-master/Discord rat/Resources/PasswordStealer.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Token grabber.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Token grabber.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Webcam.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Webcam.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Discord-RAT-2.0-master/Discord rat/Resources/rootkit.exe

Resource

win7-20240220-en

evasion

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

Discord-RAT-2.0-master/Discord rat/Resources/rootkit.exe

Resource

win10v2004-20240508-en

bootkit persistence

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

Discord-RAT-2.0-master/Discord rat/Resources/unrootkit.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

Discord-RAT-2.0-master/Discord rat/Resources/unrootkit.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net35/dnlib.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net35/dnlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net45/dnlib.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net45/dnlib.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/netstandard2.0/dnlib.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/netstandard2.0/dnlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Discord-RAT-2.0-master/Token grabber/grabber.ps1

Resource

win7-20240611-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

Discord-RAT-2.0-master/Token grabber/grabber.ps1

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/ASN1StreamParser.js

Resource

win7-20240221-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/ASN1StreamParser.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Encodable.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Encodable.js

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1InputStream.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1InputStream.js

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Null.js

Resource

win7-20240419-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Null.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Object.js

Resource

win7-20240611-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Object.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1ObjectDescriptor.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1ObjectDescriptor.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net35/dnlib.dll
Size

1.1MB
MD5

c85801df1a4b5c3c99e0907ee758e678
SHA1

512b12ac64d1846ec9add9c15774fae59d2fafdf
SHA256

981af1856c0635540cdbbc1cf3725a47b753182f6f23717f8cca9c7da200d4b6
SHA512

697ab714d199a4a45055d2769a1eed2ad0abd51de50a5bc4ab8b6685a0277979f9333258e342b23062b01981c032e8fb7efa4ec1dd3c8e916d1acd32d786c376
SSDEEP

24576:lXsiTalLh9PfNf4JA7NxFoW5UNpYXB1kt5uIv7fntQ2:3itL5xywPktU

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Discord-RAT-2.0-master\Discord rat\packages\dnlib.3.5.0\lib\net35\dnlib.dll",#1
1⤵
PID:532

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads