discordrat | 04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621 | Triage™

Login
Reports

Overview

overview

Static

static

04762d1da1...1N.exe

windows7-x64

04762d1da1...1N.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621N
Size 78KB
Sample240927-gr1xws1fle
SHA256 04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621
MD5 9d1ba63c89b1571ce0e1e22ff33c9080
SHA1 411481276beb29a9cb4bc953934677be14f4218f
SHA512 809641ed2dcd865e72394ae5872aeb675b9082c02f5b66b3dfb4c5e16f6e0bea0909d41291b31f6b900f92f1bde1893beeef2527fcf8e530cbdbe0ebfed4e4a9
SSDEEP 1536:y2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIm:yZv5PDwbjNrmAE+PIm
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordrat persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621N.exe

Resource

win7-20240729-en

windows7-x64

2 signatures

120 seconds

discordrat persistence rat rootkit stealer

Behavioral task

behavioral2

Sample

04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621N.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

120 seconds

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTIwNjEzNTQ2MDI4MDE0Mzg5Mg.GO-zlK.jNdnHBjjoj0kJP2ukmRPFKU5vhoHiHpqCxQ_pg
server_id
1206135833380266015

Targets

- Target
  04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621N
- Size 78KB
- SHA256 04762d1da1b5dd80af330a25a39c42e1a845ccd6158a39817f2020cac0078621
- MD5 9d1ba63c89b1571ce0e1e22ff33c9080
- SHA1 411481276beb29a9cb4bc953934677be14f4218f
- SHA512 809641ed2dcd865e72394ae5872aeb675b9082c02f5b66b3dfb4c5e16f6e0bea0909d41291b31f6b900f92f1bde1893beeef2527fcf8e530cbdbe0ebfed4e4a9
- SSDEEP 1536:y2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIm:yZv5PDwbjNrmAE+PIm
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer

© 2018-2026

Terms | Privacy