Analysis
-
max time kernel
62s -
max time network
65s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
23-11-2024 17:01
Behavioral task
behavioral1
Sample
Client-built_Sugary.exe
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Client-built_Sugary.exe
Resource
win11-20241007-en
windows11-21h2-x64
4 signatures
150 seconds
General
-
Target
Client-built_Sugary.exe
-
Size
233KB
-
MD5
29fb910aca6fd630dfc79683b0ae2a85
-
SHA1
bc5cc2c7a290b5f85ed39bb042b8a8cd20946e59
-
SHA256
ce864197af77c17580f8dcdc48c20d2ba53c1b9721f07664aebe33b9e7ce4fd3
-
SHA512
9120a3815d1ce6c3abefc1472eee241ac9c7df382c80681cc477367e160aad4a51dbedd0e6be5e62638ccd2718c75d6c7af138721b12d5ef453475b3257516ca
-
SSDEEP
6144:hv5PDwbBrnIrXxMxl1TSZOiECd7LbkjrR:hv5RrBGlhiECd
Score
10/10
Malware Config
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Client-built_Sugary.exedescription pid Process Token: SeDebugPrivilege 3156 Client-built_Sugary.exe