Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

DiscordHac...ls.exe

windows10-2004-x64

10

Resubmissions

28/09/2024, 16:12

240928-tnypksxdjb 10

22/09/2024, 12:56

240922-p6n6ms1bnh 10

20/09/2024, 19:36

240920-ybrgysthjq 10

Analysis

  • max time kernel
    416s
  • max time network
    1141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-fr
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-frlocale:fr-fros:windows10-2004-x64systemwindows
  • submitted
    28/09/2024, 16:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DiscordHackerTools.exe

  • Size

    90KB

  • MD5

    fdd2dbdc384cfcedf86537203b6ed986

  • SHA1

    37f7f2ccc0f594445ccc1b846da2cf7885dfea6d

  • SHA256

    95e5f46c36b28533bbf92f1a264dcc439aea1b0e030e360998e830b5b7036edf

  • SHA512

    161d6524e73891b719c28b29e95734f30ace6e93771164faed3bdab689e59ef641e5645ee5c5d458518b5200f865dcc62ab4336b2f899bbcaef79cced0c6538c

  • SSDEEP

    1536:sbPjt72uOFmYskRPUAqtBTldwr0bpAkA/rZgbGNra+uexCxoKV6+f2vH:ajtyuOFpskpgBTlugmgbGNra+bS2P

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTI4NjY5NzM2MzA0OTY3NjgyMg.GXVoQY.9z4vKuRhM26WGS-YJsP0Qdv7XSkZ1mvw0jZ_4w

  • server_id

    1286696321482489930

Signatures

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DiscordHackerTools.exe
    "C:\Users\Admin\AppData\Local\Temp\DiscordHackerTools.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3632-0-0x00007FF944B83000-0x00007FF944B85000-memory.dmp

    Filesize

    8KB

    Download

  • memory/3632-1-0x000001299A080000-0x000001299A09C000-memory.dmp

    Filesize

    112KB

    Download

  • memory/3632-2-0x00000129B46E0000-0x00000129B48A2000-memory.dmp

    Filesize

    1.8MB

    Download

  • memory/3632-3-0x000001299BCA0000-0x000001299BCE2000-memory.dmp

    Filesize

    264KB

    Download

  • memory/3632-4-0x00007FF944B80000-0x00007FF945641000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/3632-5-0x00000129B5050000-0x00000129B5578000-memory.dmp

    Filesize

    5.2MB

    Download

  • memory/3632-6-0x00007FF944B83000-0x00007FF944B85000-memory.dmp

    Filesize

    8KB

    Download

  • memory/3632-7-0x00007FF944B80000-0x00007FF945641000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/3632-8-0x00000129B4C30000-0x00000129B4D32000-memory.dmp

    Filesize

    1.0MB

    Download