Analysis
- max time kernel
2s - max time network
5s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
- submitted
06/07/2024, 18:53
General
- Target Injector.exe
- Size 78KB
- Sample240706-xjwk7sseqd
- SHA256 1adb49471838431ec8e5ad62abb00c704f32fbac4ee164f4244896e87b9517df
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTI1NjU2ODI5ODA3MDQ3NDc4NQ.Gp9PSJ.9XfORrX7Q0UZ0YFEnibKs_j5b6NOcjXXsqTnyA
-
server_id
1256297785779556363
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Injector.exe"C:\Users\Admin\AppData\Local\Temp\Injector.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4664-0-0x000002759C5B0000-0x000002759C5C8000-memory.dmp
memory/4664-1-0x00007FFD1AD93000-0x00007FFD1AD95000-memory.dmp
memory/4664-2-0x00000275B6BE0000-0x00000275B6DA2000-memory.dmp
memory/4664-3-0x00007FFD1AD90000-0x00007FFD1B851000-memory.dmp
memory/4664-4-0x00000275B73E0000-0x00000275B7908000-memory.dmp