Analysis
-
max time kernel
13s -
max time network
16s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14-09-2024 14:14
General
-
Target
FreeRobux.exe
-
Size
78KB
-
MD5
041960d257c7b96c4be63450c10a517f
-
SHA1
be6c8d7390f077b7afd5fe88f781f6ec4407be7d
-
SHA256
44353669c69e1b2f77c891fdee2c5e935d30e36c18be5b20e44062c66af28e32
-
SHA512
57a6f47666e6c3f3c7c553211e638643aa2a6f6196ff22c5a0817a9182971701e721919e72ea9a4f281f582c3bd478ff9501f8a9980ce89de018c3141f42a9e4
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+iPIC:5Zv5PDwbjNrmAE+OIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI4NDQzMjk3MTkwMTgzMzIyNw.GFmNsf.p73rhcMMsLIbgL13MHzRo9scT2hhlm_2Vrbzpc
-
server_id
1284433394939330651
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FreeRobux.exe"C:\Users\Admin\AppData\Local\Temp\FreeRobux.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
10.8MB