Analysis
- max time kernel
138s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
13/08/2024, 16:20
General
- Target deopeggfat.exe
- Size 78KB
- Sample240813-tth63stele
- SHA256 f1a7a28e740662caf951e9cad821f700f179969f01c6189c7c3d2feee6b3c7ad
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTI1ODI0ODgxODg5NDQzODU0MQ.GtMqtu.TFdVaB2ncG-zERbucajj-1qChbt7CtWp-x3zsM
-
server_id
1258106314291286016
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\deopeggfat.exe"C:\Users\Admin\AppData\Local\Temp\deopeggfat.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/624-0-0x0000021ECD280000-0x0000021ECD298000-memory.dmp
memory/624-1-0x00007FF811F23000-0x00007FF811F25000-memory.dmp
memory/624-2-0x0000021EE7890000-0x0000021EE7A52000-memory.dmp
memory/624-3-0x00007FF811F20000-0x00007FF8129E1000-memory.dmp
memory/624-4-0x0000021EE8090000-0x0000021EE85B8000-memory.dmp
memory/624-5-0x00007FF811F20000-0x00007FF8129E1000-memory.dmp