discordrat | 6f2ef5858f6531a0ed339ab46ddc3561b7c0480d788972d7264c90fb474fe716 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

svchost.exe

windows10-2004-x64

Resubmissions

14/09/2024, 15:17 UTC

240914-sn8n4s1crh 10

14/09/2024, 14:48 UTC

240914-r6jx2ayhnm 10

Sharing

General

Target

svchost.zip
Size

27KB
Sample

240914-r6jx2ayhnm
MD5

8073e2b35e254b3a2f12b25dff9fe480
SHA1

13779d36e76a5509be02ad9da1e596b53a4e9682
SHA256

6f2ef5858f6531a0ed339ab46ddc3561b7c0480d788972d7264c90fb474fe716
SHA512

a955b84caf6b7e61eef9d3c1c972c5c18d26539f6007e601953734616dfb8e5d3f49472cc99b31cda1d401a2ace71ef9ed620117695280783e6099d8c3eaefd1
SSDEEP

768:6gZMqAosIQkA9NEoCjmVGCbH2eNbCT3BHtykn9tpWAnjYiatksh34FvuUpj:B95YCjk1WeNbCTBHgk9tESva6ccvj

Score

10^/10

discordrat persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

svchost.exe

Resource

win10v2004-20240802-en

discordrat persistence rat rootkit stealer

windows10-2004-x64

8 signatures

1200 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIxNDI4ODU0MzM2NzgyMzQ2MA.GV0m0h.MteSthu-bNQUCOFRF7SKbN-Ev4LrwJ5c9GvsKo
server_id
1214286153285378130

Targets

- Target
  
  svchost.exe
- Size
  
  78KB
- MD5
  
  dcc525778c53f038afea0b507f75bf0d
- SHA1
  
  7844ad6cfe0e297e1b58b9c3113ebb33d9577679
- SHA256
  
  92f9bc1b67fe5b8e1494a36b827aa7f14614bbefac6350f1287eeb8ca0d27ca6
- SHA512
  
  6b9d3f00b34fe556c5df8c422bc78ac34f84b6d64a34a0c50c9fc7a593b220db22408e02030eb62cde7c09d77e0f6074d198774c1c4716ccc11452b35eed9283
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.