discordrat | 16bb67a19701b6501af30450601c2c29e1264e47157dcec20754f27d1dc4cd03

General

Target

pikmin.txt
Size

508B
Sample

240716-bytt9sygjj
MD5

15cfefa805d48ab3ae4030dfd6f3ab3b
SHA1

77af69b52616f2a487f2acdb0236e85f18b85ef1
SHA256

16bb67a19701b6501af30450601c2c29e1264e47157dcec20754f27d1dc4cd03
SHA512

45880fffe5dec2b553d8b27dad929290553613cd7228f55d396fa1514e2f93e0eb2e963df1651fcc1d6d1b8e3885908f86da674ff1ae90ff5380d8a7e19194df

Score

10^/10

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2MjU3ODQwOTUxOTcxMDM0MA.GM8Qz2.oHZL__hfnIDjXge1Rg3E4fIJEn7S49wVYLqIfA
server_id
1262574013796978799

Targets

- Target
  
  pikmin.txt
- Size
  
  508B
- MD5
  
  15cfefa805d48ab3ae4030dfd6f3ab3b
- SHA1
  
  77af69b52616f2a487f2acdb0236e85f18b85ef1
- SHA256
  
  16bb67a19701b6501af30450601c2c29e1264e47157dcec20754f27d1dc4cd03
- SHA512
  
  45880fffe5dec2b553d8b27dad929290553613cd7228f55d396fa1514e2f93e0eb2e963df1651fcc1d6d1b8e3885908f86da674ff1ae90ff5380d8a7e19194df
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

4

T1082

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Discord RAT

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2