discordrat | 3eda8de3fca606c90d36e6f1148b0c78eac42ed532c182dfe3c5214bd03da032 | Triage

Resubmissions

08-07-2024 06:23

240708-g5mmesycqh 10

08-07-2024 06:21

240708-g4vlmswfnk 10

08-07-2024 06:20

240708-g351zsycka 10

08-07-2024 06:17

240708-g2bezsybmf 10

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

240708-g4vlmswfnk
MD5

8cce5e63c8cefaf423b2f34978fe67ed
SHA1

dfff7fc992ea0c6e765210fb58983ee833cb2177
SHA256

3eda8de3fca606c90d36e6f1148b0c78eac42ed532c182dfe3c5214bd03da032
SHA512

5f8392106cb5b4e59aa0ce5ce4cb8227f682df7afdb6fa288e876a0954dfe6452a75e1adc78d5f6a9a093949f05b6606e88c5cbfcfca93037e2433dc18ab0371
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+8PIC:5Zv5PDwbjNrmAE+wIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1OTc1MzM2OTYwNjU1Nzc4Nw.GoiytD.R0INqYQ4iYfEi_aMf5nQz0adqWU9PKjBfAUqaM
server_id
1259753103436156978

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  8cce5e63c8cefaf423b2f34978fe67ed
- SHA1
  
  dfff7fc992ea0c6e765210fb58983ee833cb2177
- SHA256
  
  3eda8de3fca606c90d36e6f1148b0c78eac42ed532c182dfe3c5214bd03da032
- SHA512
  
  5f8392106cb5b4e59aa0ce5ce4cb8227f682df7afdb6fa288e876a0954dfe6452a75e1adc78d5f6a9a093949f05b6606e88c5cbfcfca93037e2433dc18ab0371
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+8PIC:5Zv5PDwbjNrmAE+wIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer