Analysis
-
max time kernel
32s -
max time network
33s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
26-10-2024 22:03
General
-
Target
My game made by nasreddine.exe
-
Size
78KB
-
MD5
085c51f127d861ccaf2f8c1ff9ba776d
-
SHA1
2d8c168e37227e439607933d77a6a2b67c20015c
-
SHA256
13136b162994947da3988677ec3ede35502b5fbbc24c64bad17207e27bea793a
-
SHA512
7ddf4ed2c15a344a338e4e917e26ccd19484993c7b3e732608ecd0add824374ad07437390e67fa1f2c937682f95bb4a375a7ae116d67301ca0a67affca073340
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+YCPIC:5Zv5PDwbjNrmAE+YuIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI5OTg0MDI4MDU4MDg1MzgwMA.Gf6QvR.CAidEfh94jI3_WUoDi6d2AQm1kPZvNug7mCP-0
-
server_id
1299838981277745224
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\My game made by nasreddine.exe"C:\Users\Admin\AppData\Local\Temp\My game made by nasreddine.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB