Analysis
-
max time kernel
1s -
max time network
10s -
platform
windows11-21h2_x64 -
resource
win11-20240730-en -
resource tags
-
submitted
31-07-2024 18:44
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
0e5c12cdac12a615258742615184f2fe
-
SHA1
579b5fa7e40bdb24780a4ace0c8dbf6a6d10125f
-
SHA256
bea74e0661c9ba64449cdc966c1adc840722995d4c9c5ebd800544dcd6904150
-
SHA512
7548a4bca2a370e58d783d68bdbb0de00b7d725c69871d023f1f41540a9080f73e8b52878aaab88b2a8b86ff6a36a85d95d0b76b8612759c41afa84bd506978d
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+wPIC:5Zv5PDwbjNrmAE+0IC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI1MDExOTQ0MDQwMjQ4NTMzMA.GaqxOF.43z8RlQ9zz_F0q5JZdzRm1ZZrykQYyngId7wP8
-
server_id
1250120668813594766
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB