discordrat | 6d1703bd786779f40dbb4cfd0de3e39ed7f09afcb8e3555aabc1bf6839ccb4da

Resubmissions

14/09/2024, 14:15

240914-rk2wqaycle10

08/09/2024, 07:27

240908-jagh2atcpp10

Sharing

Copy URL Twitter E-mail

General

Target
FPS+.exe
Size 78KB
Sample240908-jagh2atcpp
SHA256 6d1703bd786779f40dbb4cfd0de3e39ed7f09afcb8e3555aabc1bf6839ccb4da
MD5 b330768ecab3abad7aff662542e47b98
SHA1 9182c254d638fdb07f64819f113af6e3ed34466d
SHA512 b62c74545b125dcd6afb4a7923ef52b6b9ac798796e82e7d2229e6748a8728fecbbd197375ebf6e2941451d0ffeb3c1b1d2e33d6d86792b65cb0d1ab75c4949d
SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+JPIC:5Zv5PDwbjNrmAE+5IC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI4MjIzOTgwNDU4NjU5NDMxOQ.GEkcj7.DZZa25XaQvgv-ZVRs-HJbbZyRm7z_fvhKTVxyU
server_id
1282239514231701626

Targets

- Target
  FPS+.exe
- Size 78KB
- SHA256 6d1703bd786779f40dbb4cfd0de3e39ed7f09afcb8e3555aabc1bf6839ccb4da
- MD5 b330768ecab3abad7aff662542e47b98
- SHA1 9182c254d638fdb07f64819f113af6e3ed34466d
- SHA512 b62c74545b125dcd6afb4a7923ef52b6b9ac798796e82e7d2229e6748a8728fecbbd197375ebf6e2941451d0ffeb3c1b1d2e33d6d86792b65cb0d1ab75c4949d
- SSDEEP 1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+JPIC:5Zv5PDwbjNrmAE+5IC
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

discordrat persistence rat rootkit stealer discovery
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Discord RAT

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2