Analysis
-
max time kernel
93s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08-07-2024 08:52
General
-
Target
Client-built.exe
-
Size
89KB
-
MD5
ef6d019f15f74d6ad839a9ba75318981
-
SHA1
1ebbe171a6cad7d3d2327987b465e6c956b7b439
-
SHA256
b951272f47ced0c14aa6be5372daa3e89fff7b44dc5ae253c8166aeffe667a15
-
SHA512
6078520ff4ea91b971421f4f434726b6f626d407d9dbc388bc830ee5defb14e3b40432b7ad248472a146567679ff43443250965d5f84777aa9b342cb93fac5c9
-
SSDEEP
1536:nE+2kB+5mjlB7OJ7nyfqgjOXT3UhqWkIod+K46MUL2UgbmNrt+fexCxoKV6+fcGH:Ed55mjDOJmfqgjOD3UhqpI4T4oLtgbm
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI1NTcyNzcxMzM5ODgyMDg2NQ.GY_3hS.g7WGHrqjV92f8bpx1SBQS0hKECEsHYsCTP5ByY
-
server_id
1255727160723767347
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
104KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB