discordrat | 9ddd3757585f55bea693a536e7ec6c4de0fd46f7df565f9cf6d10e339af2e845 | Triage

Resubmissions

13-07-2024 19:37

240713-ybwfxavapr 10

13-07-2024 19:36

240713-ybjr4svapk 10

13-07-2024 19:36

240713-ya74bavamp 10

13-07-2024 19:34

240713-yabp4svakk 10

13-07-2024 19:29

240713-x7eycswerg 10

Sharing

General

Target

rostrap.bin
Size

78KB
Sample

240713-yabp4svakk
MD5

c806f00fa32f343f9849c77003bb4cc1
SHA1

4a80c5b110f93d9dbcc85885bbf231de5ac8ace6
SHA256

9ddd3757585f55bea693a536e7ec6c4de0fd46f7df565f9cf6d10e339af2e845
SHA512

bac500e08913263bcabab7622eb7d00443d3d426cee9000edcd7b6089cf6e42be2a6b8f93fa60ef703b5400016febf8fb4c922ff17f2c80024a39450440deeb4
SSDEEP

1536:Q0QhcOUX0RU1uB3Yec0OIwbJNrfxCXhRoKV6+V+ttD:Qojj03wbJNrmAE+DD

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2MTcwMjM0NDQ4ODUyMTgwOQ.GyJxES.iPPznz14IbFotKTZ3KViTwuS9T3PzEb13fnomo
server_id
1261715255004762132

Targets

- Target
  
  rostrap.bin
- Size
  
  78KB
- MD5
  
  c806f00fa32f343f9849c77003bb4cc1
- SHA1
  
  4a80c5b110f93d9dbcc85885bbf231de5ac8ace6
- SHA256
  
  9ddd3757585f55bea693a536e7ec6c4de0fd46f7df565f9cf6d10e339af2e845
- SHA512
  
  bac500e08913263bcabab7622eb7d00443d3d426cee9000edcd7b6089cf6e42be2a6b8f93fa60ef703b5400016febf8fb4c922ff17f2c80024a39450440deeb4
- SSDEEP
  
  1536:Q0QhcOUX0RU1uB3Yec0OIwbJNrfxCXhRoKV6+V+ttD:Qojj03wbJNrmAE+DD
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer