discordrat | 0cdf3658260f5e4abb0cc840fb3038d189015d07d9e82f5301a4410fd739e4b9 | Triage

Resubmissions

22-07-2024 18:50

240722-xhabkssbmb 10

22-07-2024 18:44

240722-xdxlbasdnk 10

22-07-2024 18:41

240722-xbzb5a1gjg 10

22-07-2024 18:38

240722-xaew4asbll 10

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

240722-xdxlbasdnk
MD5

5d124e382b6e75350e290f2ca92dcd8f
SHA1

1453d068d2d1a5c02696f82c148c91d749c99e68
SHA256

0cdf3658260f5e4abb0cc840fb3038d189015d07d9e82f5301a4410fd739e4b9
SHA512

41f012b71fa8543fb91a2f30c96defa0d614b917de5b9abed85eb3f11a6643b7c3038574887e399e609f0308b8442a77c07bfae1d442e0810e26a05d5c2c846f
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+4PIC:5Zv5PDwbjNrmAE+cIC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI2NTAxMTgwMzUyMDI0MTgyNg.Gixgjj.XDPqCHG2EZuhXeegiOPwvU_Lk4mudkLkpJ6VOU
server_id
1265010770744443021

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  5d124e382b6e75350e290f2ca92dcd8f
- SHA1
  
  1453d068d2d1a5c02696f82c148c91d749c99e68
- SHA256
  
  0cdf3658260f5e4abb0cc840fb3038d189015d07d9e82f5301a4410fd739e4b9
- SHA512
  
  41f012b71fa8543fb91a2f30c96defa0d614b917de5b9abed85eb3f11a6643b7c3038574887e399e609f0308b8442a77c07bfae1d442e0810e26a05d5c2c846f
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+4PIC:5Zv5PDwbjNrmAE+cIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer