discordrat | c902d6571697ad044ac2c0090d522d115d3e06ab672ca355e3d9085b6c77e304 | Triage

Sharing

General

Target

PanelExecutor-Fixer.exe
Size

78KB
Sample

240705-jabyjsxbne
MD5

e265a5b1fe4e46c72e018e5b7376563e
SHA1

c45441fe1c0b431ad69915c3242398a16f8c19bb
SHA256

c902d6571697ad044ac2c0090d522d115d3e06ab672ca355e3d9085b6c77e304
SHA512

8b1a9f0068ffb499dd02392f6eb4fb7e16c84b23932c8b6d5e6c12512c8370f1466eda856181045fe4f0addbac0f231f3ac78219a565752db963be19dc46e5b5
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+1PIC:5Zv5PDwbjNrmAE+lIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1ODY0ODcyMTY2MzU5MDQzMA.GiwjRC.iYf3r79g3-ZKRAfGjtWZw33DYNFg759sGho8y8
server_id
1247781121165623369

Targets

- Target
  
  PanelExecutor-Fixer.exe
- Size
  
  78KB
- MD5
  
  e265a5b1fe4e46c72e018e5b7376563e
- SHA1
  
  c45441fe1c0b431ad69915c3242398a16f8c19bb
- SHA256
  
  c902d6571697ad044ac2c0090d522d115d3e06ab672ca355e3d9085b6c77e304
- SHA512
  
  8b1a9f0068ffb499dd02392f6eb4fb7e16c84b23932c8b6d5e6c12512c8370f1466eda856181045fe4f0addbac0f231f3ac78219a565752db963be19dc46e5b5
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+1PIC:5Zv5PDwbjNrmAE+lIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer