Overview

overview

10

Static

static

10

Loader 1.0...ob.exe

windows11-21h2-x64

10

Loader 1.0/dnlib.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Loader 1.0.zip
  • Size 1.2MB
  • Sample240707-131wtaygql
  • SHA256 0b179ae27d3aa66de1646eec4f31571171cb8cceb2a11c8410afd237213af46f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
discordratpersistenceratrootkitspywarestealer

Malware Config

Extracted

Family

  • discordrat

Attributes
  • discord_token

    MTI1NjkxNTA1ODEzOTcyOTkyMA.GgcvFH.ZZtWziWR04JaiPJgPsf437j8uiy-5kqu0pM8H4

  • server_id

    1256913520704884807

Targets

    • Target
      Loader 1.0/Loader 1.0 .exe-ob.exe
    • Size 79KB
    • SHA256 e24dc13510c766e09e987d58d4865a6b181cd142b23abdf5300ab7fae7238745
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discordratpersistenceratrootkitspywarestealer

    • Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1
    • Target
      Loader 1.0/dnlib.dll
    • Size 1.1MB
    • SHA256 4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks