Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2024 16:22

General

  • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    db5738e4067c9224b5f70a9fc592f80f

  • SHA1

    24516fc2baa46a305211ab9a38385c10dcf6f4b6

  • SHA256

    ef0f45565ff04a6a32ac2c45b05f58e76c3aee4147f90f64493cbe7774f264d3

  • SHA512

    30635ecb5007d6ed9a90ca263c34c4808168c5a25aea7720e97d9f2764be48c07221f6c984421ad1b687e06dfcd07b0e1380dbb8841efcacbf5c6648cf63ff51

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMwMjMwNTMyNzY2MzkzOTcyNg.G8RAAK.8sxeY5icxYIDAcJde2R5zytU1RgGsFaMt770pw

  • server_id

    1302304456985149450

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Client-built.exe
    "C:\Users\Admin\AppData\Local\Temp\Client-built.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3304-0-0x00007FFF96F53000-0x00007FFF96F55000-memory.dmp

    Filesize

    8KB

  • memory/3304-1-0x000001920DA20000-0x000001920DA38000-memory.dmp

    Filesize

    96KB

  • memory/3304-2-0x00000192280B0000-0x0000019228272000-memory.dmp

    Filesize

    1.8MB

  • memory/3304-3-0x00007FFF96F50000-0x00007FFF97A11000-memory.dmp

    Filesize

    10.8MB

  • memory/3304-4-0x00000192288B0000-0x0000019228DD8000-memory.dmp

    Filesize

    5.2MB

  • memory/3304-5-0x00007FFF96F50000-0x00007FFF97A11000-memory.dmp

    Filesize

    10.8MB