General
-
Target
https://github.com/moom825/Discord-RAT-2.0/releases
-
Sample
240928-zs186awcql
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MT14OTQwMTk5OTQ3NzE4mJu0NQ.GQF_qd._dAWIN8720iXcy6JJqoktvdinffbl-D0WfvDLA
-
server_id
https://discord.com/oauth2/authorize?client_id=1289401999477182545&permissions=8&integration_type=0&scope=bot
Targets
-
-
Target
https://github.com/moom825/Discord-RAT-2.0/releases
Score10/10-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Mark of the Web detected: This indicates that the page was originally saved or cloned.
-