Analysis
-
max time kernel
0s -
max time network
2s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
20-09-2024 20:00
General
-
Target
hack.exe
-
Size
92KB
-
MD5
c6fe2e5abd5d525a5985d74cb4eb9b98
-
SHA1
34ee55184bf65e57855836e7c31f4a31fcee8b05
-
SHA256
a6d82153b8f1b342dd793901278b3c1f5886d9d893b9a7ead55929d8e6cd50e6
-
SHA512
2ddd5c9d6278e81a97ca6da123a4b491ffe6d7ff3f8629605d9a1eadc7c39784fc0aba50791f4eeb186a8b6ee5f4a421a04009625be4f4391b5aa150b61a8929
-
SSDEEP
1536:42WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+SPIqEaDtf:4Zv5PDwbjNrmAE+eIJaDx
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTIyMTIwNDc4MDk1NzgzMTI2Nw.GmQf6c.zoS5R_Dke4g1enDbU8teZH9NMB5Xx7OSHgBPd0
-
server_id
1221205721236897802
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hack.exe"C:\Users\Admin\AppData\Local\Temp\hack.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
104KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB