Overview

overview

10

Static

static

10

Injector.exe

windows7-x64

10

Injector.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    2s
  • max time network
    5s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-07-2024 18:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Injector.exe

  • Size

    78KB

  • MD5

    75fd32716d11fac29ee671bf4ee672a5

  • SHA1

    62100e776287165121df72222a2dd868012a97fe

  • SHA256

    1adb49471838431ec8e5ad62abb00c704f32fbac4ee164f4244896e87b9517df

  • SHA512

    7a74e89717ba12f9f9209b2c9200f4dbb8623d6ae6e95abdb7a3020cc87960bde7fa16ccb125797fe41a9c92f3eb665050e534b0c4ae341b9cc1993f5660c581

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+9PIC:5Zv5PDwbjNrmAE+tIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI1NjU2ODI5ODA3MDQ3NDc4NQ.Gp9PSJ.9XfORrX7Q0UZ0YFEnibKs_j5b6NOcjXXsqTnyA

  • server_id

    1256297785779556363

Signatures

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Injector.exe
    "C:\Users\Admin\AppData\Local\Temp\Injector.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4664-0-0x000002759C5B0000-0x000002759C5C8000-memory.dmp
    Filesize

    96KB

    Download
  • memory/4664-1-0x00007FFD1AD93000-0x00007FFD1AD95000-memory.dmp
    Filesize

    8KB

    Download
  • memory/4664-2-0x00000275B6BE0000-0x00000275B6DA2000-memory.dmp
    Filesize

    1.8MB

    Download
  • memory/4664-3-0x00007FFD1AD90000-0x00007FFD1B851000-memory.dmp
    Filesize

    10.8MB

    Download
  • memory/4664-4-0x00000275B73E0000-0x00000275B7908000-memory.dmp
    Filesize

    5.2MB

    Download