discordrat | 428712821ae5e817dac8e5a989649a391360652b6d1cd1037acde05343b7deb2 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

TestingRat.exe

windows7-x64

TestingRat.exe

windows10-2004-x64

Sharing

General

Target

TestingRat.exe
Size

51KB
Sample

240913-cm5m3aybnp
MD5

c51f1ccde301a3e586b3ca5eaa5a850a
SHA1

f247d7df602a01077b301c4b3d649a8246a87833
SHA256

428712821ae5e817dac8e5a989649a391360652b6d1cd1037acde05343b7deb2
SHA512

165d9e4c9a85832c99abc62fba5cb51062e7adb8c6d861004c713bc96951d3bc6d59157b7a56ff205a72c2a40ed59363249a1b6f75bb29073ee0f770b11920d2
SSDEEP

1536:8qi7XngYMy5NY0tIX/ZJFlgrgDVa9/8klWL8W:8Vjg27YtPTgh9HY

Score

10^/10

discordrat persistence rat rootkit stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

TestingRat.exe

Resource

win7-20240708-en

discordrat persistence rat rootkit stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

TestingRat.exe

Resource

win10v2004-20240802-en

discordrat persistence rat rootkit stealer

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI4MzQ3NTY3MzkxODM0NTIyOA.G0O88D.D1ZSA1MVblUA0OvEih6-1jziKEHTTp-UOWtZQI
server_id
1037097190742560768

Targets

- Target
  
  TestingRat.exe
- Size
  
  51KB
- MD5
  
  c51f1ccde301a3e586b3ca5eaa5a850a
- SHA1
  
  f247d7df602a01077b301c4b3d649a8246a87833
- SHA256
  
  428712821ae5e817dac8e5a989649a391360652b6d1cd1037acde05343b7deb2
- SHA512
  
  165d9e4c9a85832c99abc62fba5cb51062e7adb8c6d861004c713bc96951d3bc6d59157b7a56ff205a72c2a40ed59363249a1b6f75bb29073ee0f770b11920d2
- SSDEEP
  
  1536:8qi7XngYMy5NY0tIX/ZJFlgrgDVa9/8klWL8W:8Vjg27YtPTgh9HY
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.