discordrat | 7544de395487aa6d1be4b0ed14f45c40889d92ba072c970f391caf487568b31f | Triage

Resubmissions

15-07-2024 15:02

240715-serz1ayhje 10

15-07-2024 15:00

240715-sdh1psygna 10

Sharing

General

Target

TESTING FOR TRIA.GE.exe
Size

78KB
Sample

240715-serz1ayhje
MD5

ae234788ce69151fcb6e2d8fb6e08f9f
SHA1

5968b1755318f52a6fd49c2f9bab9dc5e21f2094
SHA256

7544de395487aa6d1be4b0ed14f45c40889d92ba072c970f391caf487568b31f
SHA512

1508d8ef823985420ecd063e5b2928b17794e3e0bc8d1f067031c19278db505f9339473fc00e2631b1e028966fd3347b8e3dba9e4f6828765582668e9a586d64
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0NDI1MTUyMjcwODAxNzIyMw.Gw8Wcp.3sjHUtDDsGBC8_FE28u2H3H55QI48dc7Xn28tY
server_id
1253923425735675915

Targets

- Target
  
  TESTING FOR TRIA.GE.exe
- Size
  
  78KB
- MD5
  
  ae234788ce69151fcb6e2d8fb6e08f9f
- SHA1
  
  5968b1755318f52a6fd49c2f9bab9dc5e21f2094
- SHA256
  
  7544de395487aa6d1be4b0ed14f45c40889d92ba072c970f391caf487568b31f
- SHA512
  
  1508d8ef823985420ecd063e5b2928b17794e3e0bc8d1f067031c19278db505f9339473fc00e2631b1e028966fd3347b8e3dba9e4f6828765582668e9a586d64
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer