Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
30-08-2024 20:05
General
-
Target
d1048024d5eecf64b99144683fe0b839ecbd1e294c2a45c92b2f11fe0878e7c8.exe
-
Size
78KB
-
MD5
95970fe6ecf0c1da4866a8f7690bd220
-
SHA1
229e2d6e47fb5c747c3bcfefa149c69d3568445f
-
SHA256
d1048024d5eecf64b99144683fe0b839ecbd1e294c2a45c92b2f11fe0878e7c8
-
SHA512
a49967f6beec49996bfd07de73ceda501adc7f76a3273d41e8e5ccf6e3284437a14d56ac86c4160867eb9172a510524a48cb7c4f66c224e50b038dfd6d977277
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+oPIC:5Zv5PDwbjNrmAE+sIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI3ODM5OTAzMTczMDUwMzc1Mg.GfSde5.BoKbIlZbuBwlfgHrXgvL-dfrtgb2cvZjghI2LQ
-
server_id
1278398969315070073
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1048024d5eecf64b99144683fe0b839ecbd1e294c2a45c92b2f11fe0878e7c8.exe"C:\Users\Admin\AppData\Local\Temp\d1048024d5eecf64b99144683fe0b839ecbd1e294c2a45c92b2f11fe0878e7c8.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB