Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-11-2024 15:14
General
-
Target
625d168d569c3a3f72ce77aedab32c701c74675cb662feb088ad32424284c0f3N.exe
-
Size
78KB
-
MD5
03d5255de977b428e85fc050f50880b0
-
SHA1
d7bbb942d71b9685f1da2fadd748f09630fa0796
-
SHA256
625d168d569c3a3f72ce77aedab32c701c74675cb662feb088ad32424284c0f3
-
SHA512
a01b5a5ddf3ae469cfb37e99765f0431758cccbd5c265cda8841c860a100519fb52ea9a9b45ef89676e8c8121442e8086744157a732fc53deb68ab7b6b22e48d
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+YPIC:5Zv5PDwbjNrmAE+8IC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTI5NjM1MjUzMzg3ODY3MzQxOQ.G7K6xP.31um1OGg3LiuBJBOMNrTVm3txLG4MpTpULOdUM
-
server_id
1296355605455437887
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\625d168d569c3a3f72ce77aedab32c701c74675cb662feb088ad32424284c0f3N.exe"C:\Users\Admin\AppData\Local\Temp\625d168d569c3a3f72ce77aedab32c701c74675cb662feb088ad32424284c0f3N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
10.8MB