Resubmissions

25-11-2024 01:15

241125-bmg2bszpav 10

General

  • Target

    Woomp.exe

  • Size

    78KB

  • Sample

    241125-bmg2bszpav

  • MD5

    45a48ca77edd6fcb75e6086d44afac76

  • SHA1

    87aa042d3b052982e390768af1f9171c8c6249c1

  • SHA256

    74eb1588f759f2506b59257caf40a51946c3de7115aaa07ecc0c398c30ebb327

  • SHA512

    1e7066274cb066008c989f3478b735fa238c094ccaec661345fc113db5cea92b79f778d9882d9b4249d76eebce5a9fef5fc27fe554d6092836a573af7599db11

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+fPIC:5Zv5PDwbjNrmAE+nIC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMxMDQxMTgxODEyMzkxOTQ4Mw.GwacT0.PAQkuzftriLM7RlTUiPVz9Ef_tbR89UCutRUvM

  • server_id

    1310412901319708682

Targets

    • Target

      Woomp.exe

    • Size

      78KB

    • MD5

      45a48ca77edd6fcb75e6086d44afac76

    • SHA1

      87aa042d3b052982e390768af1f9171c8c6249c1

    • SHA256

      74eb1588f759f2506b59257caf40a51946c3de7115aaa07ecc0c398c30ebb327

    • SHA512

      1e7066274cb066008c989f3478b735fa238c094ccaec661345fc113db5cea92b79f778d9882d9b4249d76eebce5a9fef5fc27fe554d6092836a573af7599db11

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+fPIC:5Zv5PDwbjNrmAE+nIC

    • Discord RAT

      A RAT written in C# using Discord as a C2.

    • Discordrat family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks