Overview

overview

10

Static

static

10

do not dow...un.exe

windows10-ltsc 2021-x64

10

Resubmissions

03-11-2024 00:29

241103-atdf2syray 10

03-11-2024 00:27

241103-art11syqfv 10

03-11-2024 00:23

241103-aptmgayqbt 10

03-11-2024 00:19

241103-amd41asmhq 10

03-11-2024 00:16

241103-akx44asmfm 10

03-11-2024 00:11

241103-ag1qtaynft 10

Analysis

  • max time kernel
    40s
  • max time network
    44s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    03-11-2024 00:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    do not download and run.exe

  • Size

    78KB

  • MD5

    f2c5e50d71723a255faafb127396b119

  • SHA1

    5784b322726fe05abae13b8dde3c6bcb10eaf83f

  • SHA256

    9da14eafeaff261c893fe5e252ecee52465c403325b9c3ba761e5d80ca76866a

  • SHA512

    5a955fca58d1f105d5ffe6004b18e013f69dbf0a06538d5c6192e9964e7249a7cbb8335411b263d56cb8108bf610f29f4c848c0d38f0c68bcfac73bb0a341259

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+APIC:5Zv5PDwbjNrmAE+kIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMwMjMwNTMyNzY2MzkzOTcyNg.GkZ69I.EmDu656kW3-o_fxbEajqbFdrqzR7r2g-hNmbM0

  • server_id

    1302304456985149450

Signatures

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat
  • Discordrat family
    discordrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\do not download and run.exe
    "C:\Users\Admin\AppData\Local\Temp\do not download and run.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1736-0-0x00007FFEEA413000-0x00007FFEEA415000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1736-1-0x0000021A9C3B0000-0x0000021A9C3C8000-memory.dmp

    Filesize

    96KB

    Download

  • memory/1736-2-0x0000021AB6AB0000-0x0000021AB6C72000-memory.dmp

    Filesize

    1.8MB

    Download

  • memory/1736-3-0x00007FFEEA410000-0x00007FFEEAED2000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1736-4-0x0000021AB72B0000-0x0000021AB77D8000-memory.dmp

    Filesize

    5.2MB

    Download

  • memory/1736-5-0x00007FFEEA413000-0x00007FFEEA415000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1736-6-0x00007FFEEA410000-0x00007FFEEAED2000-memory.dmp

    Filesize

    10.8MB

    Download