c8de0e92e603214114f8800dd99ecf8cb69ac85caf8010a99ba3f66afe70fcbf

Submit
Reports

Overview

overview

Static

static

Discord-RA...ram.js

windows7-x64

Discord-RA...ram.js

windows10-2004-x64

Discord-RA...er.dll

windows7-x64

Discord-RA...er.dll

windows10-2004-x64

Discord-RA...er.dll

windows7-x64

Discord-RA...er.dll

windows10-2004-x64

Discord-RA...am.dll

windows7-x64

Discord-RA...am.dll

windows10-2004-x64

Discord-RA...it.exe

windows7-x64

Discord-RA...it.exe

windows10-2004-x64

Discord-RA...it.exe

windows7-x64

Discord-RA...it.exe

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...ib.dll

windows7-x64

Discord-RA...ib.dll

windows10-2004-x64

Discord-RA...er.ps1

windows7-x64

Discord-RA...er.ps1

windows10-2004-x64

Discord-RA...ser.js

windows7-x64

Discord-RA...ser.js

windows10-2004-x64

Discord-RA...ble.js

windows7-x64

Discord-RA...ble.js

windows10-2004-x64

Discord-RA...eam.js

windows7-x64

Discord-RA...eam.js

windows10-2004-x64

Discord-RA...ull.js

windows7-x64

Discord-RA...ull.js

windows10-2004-x64

Discord-RA...ect.js

windows7-x64

Discord-RA...ect.js

windows10-2004-x64

Discord-RA...tor.js

windows7-x64

Discord-RA...tor.js

windows10-2004-x64

Analysis

max time kernel
139s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03-07-2024 03:39

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Discord-RAT-2.0-master/Discord rat/Program.js

Resource

win7-20240221-en

windows7-x64

28 signatures

150 seconds

Behavioral task

behavioral2

Sample

Discord-RAT-2.0-master/Discord rat/Program.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Discord-RAT-2.0-master/Discord rat/Resources/PasswordStealer.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Discord-RAT-2.0-master/Discord rat/Resources/PasswordStealer.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Token grabber.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Token grabber.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Webcam.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Discord-RAT-2.0-master/Discord rat/Resources/Webcam.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Discord-RAT-2.0-master/Discord rat/Resources/rootkit.exe

Resource

win7-20240220-en

evasion

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

Discord-RAT-2.0-master/Discord rat/Resources/rootkit.exe

Resource

win10v2004-20240508-en

bootkit persistence

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

Discord-RAT-2.0-master/Discord rat/Resources/unrootkit.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

Discord-RAT-2.0-master/Discord rat/Resources/unrootkit.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net35/dnlib.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net35/dnlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net45/dnlib.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/net45/dnlib.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/netstandard2.0/dnlib.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Discord-RAT-2.0-master/Discord rat/packages/dnlib.3.5.0/lib/netstandard2.0/dnlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Discord-RAT-2.0-master/Token grabber/grabber.ps1

Resource

win7-20240611-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

Discord-RAT-2.0-master/Token grabber/grabber.ps1

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/ASN1StreamParser.js

Resource

win7-20240221-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/ASN1StreamParser.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Encodable.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Encodable.js

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1InputStream.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1InputStream.js

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Null.js

Resource

win7-20240419-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Null.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Object.js

Resource

win7-20240611-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1Object.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1ObjectDescriptor.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Discord-RAT-2.0-master/Token grabber/src/asn1/Asn1ObjectDescriptor.js

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Discord-RAT-2.0-master/Discord rat/Resources/Token grabber.dll
Size

2.8MB
MD5

f64eadf97eacf0c639336617cf6af03b
SHA1

ba2a264ac0773a804ab15da18ded3bc556cc99ce
SHA256

a3ca8d72edaf4ffb84a38e88a31f9e537d7d7b76f7cc7966583c7b4b4a811c74
SHA512

e4de93107ec60ebdcd2bc6c4b5bddbc2d639d805bf8b7ad57881b04a5f5f5d0bb7cb24e4f3169801fee220b338494b82cd180c36e9dcd0cedda726a5c4621fd5
SSDEEP

49152:TsLJjhwr1Bp6ErdSl0WXK99EYKauI1HIknog:TKJjhm1BptqXK

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Discord-RAT-2.0-master\Discord rat\Resources\Token grabber.dll",#1
1⤵
PID:396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4172,i,6870419347051655189,5491911050420577193,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
1⤵
PID:1164

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads