Analysis
-
max time kernel
9s -
max time network
7s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02/11/2024, 17:27
General
-
Target
ZoraraUI.exe
-
Size
95KB
-
MD5
57114b780ad5cf03a23b897a7ee3ed50
-
SHA1
871313b421dddae01c68719546e8e423035bf189
-
SHA256
e3e46f0d836d7536b5f14324d34ffe38fc337a9c09fbf0429fdd9fe82d1e1ba4
-
SHA512
dc09eaa39349a2d4c90a904b85bdb8c7abebb83c6e1f00aeb0efcbca09e2444f97550fb0c8ea1600855b77278ccd4834f8cab11f151bf15b7f340a997a069bcc
-
SSDEEP
1536:l2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+9PI9:lZv5PDwbjNrmAE+tI9
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMwMjIxOTYyOTc4MzE1ODgwNQ.GxLQZ8.DRpyOqRKH2MlfrQEsy0l2IIHWvJ9hbwMpr2sCc
-
server_id
1302215304264290354
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe"C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB