discordrat | ba5ffd087b3a54c77b4db191c2a755d1ac8785c961607a6dc18bd2f7cec5d05e | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

startUp.exe

windows10-2004-x64

Sharing

General

Target

startUp.exe
Size

78KB
Sample

240815-jpfkaasdlh
MD5

d9fb67b05ff0e222de22986ae8e1d267
SHA1

72c030ea6263d1eb696e573543d050760aaf9ba1
SHA256

ba5ffd087b3a54c77b4db191c2a755d1ac8785c961607a6dc18bd2f7cec5d05e
SHA512

8508268766bcf28bc1203c73d03ab0676ea645ea4a8034fd4bd28ec68c9e63c6df3f44551829a60763ed1c97435e2968bdcc5d61e9bba87221243cc56575a743
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+EPIC:5Zv5PDwbjNrmAE+YIC

Score

10^/10

discordrat discovery persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

startUp.exe

Resource

win10v2004-20240802-en

discordrat discovery persistence rat rootkit stealer

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTE5MTM5MjgwNTUxNjQ3NjQyNg.G5XJUK.HjtQ7ee5W55epw2DuQzQmZY_YOKocpEDDrEFIY
server_id
1270003925323481189

Targets

- Target
  
  startUp.exe
- Size
  
  78KB
- MD5
  
  d9fb67b05ff0e222de22986ae8e1d267
- SHA1
  
  72c030ea6263d1eb696e573543d050760aaf9ba1
- SHA256
  
  ba5ffd087b3a54c77b4db191c2a755d1ac8785c961607a6dc18bd2f7cec5d05e
- SHA512
  
  8508268766bcf28bc1203c73d03ab0676ea645ea4a8034fd4bd28ec68c9e63c6df3f44551829a60763ed1c97435e2968bdcc5d61e9bba87221243cc56575a743
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+EPIC:5Zv5PDwbjNrmAE+YIC
Score

10^/10

discordrat discovery persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratdiscoverypersistenceratrootkitstealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.