discordrat | d77435a738ed56eb7f078bad23ef38a037dc762b1eaf5a4f6123c4251259cb69 | Triage

Sharing

General

Target

Discord rat.exe
Size

90KB
Sample

240713-jbr16a1hkq
MD5

8a32ab164cf21c25d14186558d1d0b39
SHA1

e6bfcec636e3eefe571195a5b86ba45e4886fa3e
SHA256

d77435a738ed56eb7f078bad23ef38a037dc762b1eaf5a4f6123c4251259cb69
SHA512

1cfd11ef29dbe145931fbb18c185d3fa0fe25d01f449fe1188ef992388f5766e0f6c086534d4f036780602f6223c3d78c8cf50433ee2ab99e6512640b687a954
SSDEEP

1536:xHaXnTwWMeuPJdtAqBkblZNEpqejw+jZpZbANrV+uexCxoKV6+fMsx:UsWMeuPy0kblbGqeUsZpZbANrV+bSMw

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI1Njk1OTk3MzkyMjA1MDA0OA.GrCdzf.wkygkabj6BRMG0ExFn44Ch1ccIL8YyoEZeXNPE
server_id
1256666099580403734

Targets

- Target
  
  Discord rat.exe
- Size
  
  90KB
- MD5
  
  8a32ab164cf21c25d14186558d1d0b39
- SHA1
  
  e6bfcec636e3eefe571195a5b86ba45e4886fa3e
- SHA256
  
  d77435a738ed56eb7f078bad23ef38a037dc762b1eaf5a4f6123c4251259cb69
- SHA512
  
  1cfd11ef29dbe145931fbb18c185d3fa0fe25d01f449fe1188ef992388f5766e0f6c086534d4f036780602f6223c3d78c8cf50433ee2ab99e6512640b687a954
- SSDEEP
  
  1536:xHaXnTwWMeuPJdtAqBkblZNEpqejw+jZpZbANrV+uexCxoKV6+fMsx:UsWMeuPy0kblbGqeUsZpZbANrV+bSMw
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer