Analysis
-
max time kernel
93s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08-07-2024 01:48
General
-
Target
9bcaf3dbe98611f6cda0aa2e225777401746a802e53bd4b48f3d11637ed19c1a.exe
-
Size
78KB
-
MD5
a5d78ceca0d1cf4f7c01570f52c87eba
-
SHA1
79a51625c12e3dc18f0df104e4b69c390780642a
-
SHA256
9bcaf3dbe98611f6cda0aa2e225777401746a802e53bd4b48f3d11637ed19c1a
-
SHA512
ce2fa48229eae4ee7ea6e707de5c244b9a645735731d2c9174bb65e272380b109ea709eac1c20fc5b5e004af0e340c44827a488b217ac14787ef4cc33a3cbc3f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+8PIC:5Zv5PDwbjNrmAE+wIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI1ODA5NjQzNzA2MjAwOTA2NQ.GhJzhd.kk9R2GDudIgunSijVjaWQD6sIwY3-Lvdx3K_jA
-
server_id
1258096259378577508
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bcaf3dbe98611f6cda0aa2e225777401746a802e53bd4b48f3d11637ed19c1a.exe"C:\Users\Admin\AppData\Local\Temp\9bcaf3dbe98611f6cda0aa2e225777401746a802e53bd4b48f3d11637ed19c1a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB