Resubmissions

16-11-2024 23:44

241116-3rjt9swjcs 10

16-11-2024 13:42

241116-qzv62s1pak 10

General

  • Target

    Roblox-Hack.exe

  • Size

    51KB

  • Sample

    241116-qzv62s1pak

  • MD5

    56db5bb1537ee4ed5e5637e3e78bb2af

  • SHA1

    ff5ddb08454d910bcda6cb0a25a03a952d01978f

  • SHA256

    5c13bc08d1674cb8907be6532baec4f2e210f499e1a29736994f806d1e5427fb

  • SHA512

    0596859eec3ec2e3f37700115037a4d0aefab4077b620c865fbe0161960ef465c47c73efce1f2c124d351d83ee85a12a566b029ad1e2aee9abfdd18b7289c42e

  • SSDEEP

    1536:qPRjIUGJl4exkgJEYq32vpeF3x9pjn9PY/WL5H:qetFkM032C3x959PYs

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMwNzMxODc0NzQwNDU3MDY3OA.G-vi1p.JQJFkahsFQq102eFxb2BV6vjl-EvPlDrewQ78U

  • server_id

    1305971531972608070

Targets

    • Target

      Roblox-Hack.exe

    • Size

      51KB

    • MD5

      56db5bb1537ee4ed5e5637e3e78bb2af

    • SHA1

      ff5ddb08454d910bcda6cb0a25a03a952d01978f

    • SHA256

      5c13bc08d1674cb8907be6532baec4f2e210f499e1a29736994f806d1e5427fb

    • SHA512

      0596859eec3ec2e3f37700115037a4d0aefab4077b620c865fbe0161960ef465c47c73efce1f2c124d351d83ee85a12a566b029ad1e2aee9abfdd18b7289c42e

    • SSDEEP

      1536:qPRjIUGJl4exkgJEYq32vpeF3x9pjn9PY/WL5H:qetFkM032C3x959PYs

    • Discord RAT

      A RAT written in C# using Discord as a C2.

    • Discordrat family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks