discordrat | db79dd63cecd45d56db4316a8492a5955022ab9351b09bed759ddae655ce0612 | Triage

Sharing

General

Target

db79dd63cecd45d56db4316a8492a5955022ab9351b09bed759ddae655ce0612
Size

78KB
Sample

240707-vc7zjsvhjr
MD5

54ec7b5f254a6eeff12e3d868506eb67
SHA1

608028102ad903d471ee3c4c92a1d7e10f5cd821
SHA256

db79dd63cecd45d56db4316a8492a5955022ab9351b09bed759ddae655ce0612
SHA512

843382ccc77caa7b9dd2fbca845dd1b9b16d30c35358e05fbbd080aad333a1990cd4d02d13c948607a62da8c60c258ca0f3a6541e35b9717e9597eca287b4404
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ePIC:5Zv5PDwbjNrmAE+aIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1OTI1MTUwMDgzMjY1MzQwMw.Gm7X5G.TUy6pPgT32GEzX7i2ISOKZHUFp777SsSI5Uxcs
server_id
1259251939208855572

Targets

- Target
  
  db79dd63cecd45d56db4316a8492a5955022ab9351b09bed759ddae655ce0612
- Size
  
  78KB
- MD5
  
  54ec7b5f254a6eeff12e3d868506eb67
- SHA1
  
  608028102ad903d471ee3c4c92a1d7e10f5cd821
- SHA256
  
  db79dd63cecd45d56db4316a8492a5955022ab9351b09bed759ddae655ce0612
- SHA512
  
  843382ccc77caa7b9dd2fbca845dd1b9b16d30c35358e05fbbd080aad333a1990cd4d02d13c948607a62da8c60c258ca0f3a6541e35b9717e9597eca287b4404
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ePIC:5Zv5PDwbjNrmAE+aIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer