discordrat | 195afd80fbc01d33334b27005de6c2c9e78c55220758f816c0a9f6ffba85566d | Triage

Sharing

General

Target

DiscordRAT_Build-main.zip
Size

448KB
Sample

240912-sh9zzs1anm
MD5

fba48bc48252100a4789f714b7408fa8
SHA1

b07b8cb68d5ca833bacd495a4a3e577404c8d466
SHA256

195afd80fbc01d33334b27005de6c2c9e78c55220758f816c0a9f6ffba85566d
SHA512

f164941a11bd8b0c2b17a9ce91913cf2871e59247c3b2ae2c5c463d67f3c9ccee9cc4a87705a4d8bdaf2afc41dc1e6fe3288ee99769dcd1de066d6f124245288
SSDEEP

12288:mVCoVD990usfOlCdXXJy1sw5D99GJuY9HArdo7:zoKdpyuw5D9wJWo7

Score

10^/10

discordrat discovery persistence rat rootkit stealer

Malware Config

Targets

- Target
  
  DiscordRAT_Build-main/Release/Discord rat.exe
- Size
  
  79KB
- MD5
  
  d13905e018eb965ded2e28ba0ab257b5
- SHA1
  
  6d7fe69566fddc69b33d698591c9a2c70d834858
- SHA256
  
  2bd631c6665656673a923c13359b0dc211debc05b2885127e26b0dce808e2dec
- SHA512
  
  b95bfdebef33ac72b6c21cdf0abb4961222b7efd17267cd7236e731dd0b6105ece28e784a95455f1ffc8a6dd1d580a467b07b3bd8cb2fb19e2111f1a864c97cb
- SSDEEP
  
  1536:YCH0jBD2BKkwbPNrfxCXhRoKV6+V+y9viwp:VUjBD2BPwbPNrmAE+MqU
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
behavioral1
- Target
  
  DiscordRAT_Build-main/builder.exe
- Size
  
  10KB
- MD5
  
  4f04f0e1ff050abf6f1696be1e8bb039
- SHA1
  
  bebf3088fff4595bfb53aea6af11741946bbd9ce
- SHA256
  
  ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa
- SHA512
  
  94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12
- SSDEEP
  
  96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs
Score

10^/10

discordrat discovery persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Executes dropped EXE
- Loads dropped DLL
behavioral2
- Target
  
  DiscordRAT_Build-main/dnlib.dll
- Size
  
  1.1MB
- MD5
  
  508ccde8bc7003696f32af7054ca3d97
- SHA1
  
  1f6a0303c5ae5dc95853ec92fd8b979683c3f356
- SHA256
  
  4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a
- SHA512
  
  92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d
- SSDEEP
  
  24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww
Score

1^/10
behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratdiscoverypersistenceratrootkitstealer

behavioral3