Analysis
-
max time kernel
214s -
max time network
322s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
28-09-2024 17:51
General
-
Target
Fortnite hook.exe
-
Size
78KB
-
MD5
81c119c659e7dae7ac35c7724368183d
-
SHA1
d454fb2cd51c7e459289726a2a67c836ecb2e49d
-
SHA256
e0de0454ee94f0521a52883a610a317118926351a423033c9e0c19c685e5c573
-
SHA512
4d57a8c2f05177271580043aa6919f718ddb9ac3ab2067f99709446afce6bd1585f0b4402eb02ade1e13f596838b709202d78cedf7d31220f33e95cfdeb2b36a
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI4OTYzNjI3MDM1NTc3NTUzMA.Ge3CBC.Gx2nDH3psM7IKxiEcuDpDndkDEmhtl7nYvT8jU
-
server_id
1289636027106852907
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fortnite hook.exe"C:\Users\Admin\AppData\Local\Temp\Fortnite hook.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB