General
-
Target
https://github.com/moom825/Discord-RAT-2.0/
-
Sample
241126-myqy6atrhm
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/moom825/Discord-RAT-2.0/
Resource
win10v2004-20241007-en
windows10-2004-x64
15 signatures
300 seconds
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMxMDkxNTk2MzY0NTg1NzgyMw.G_dDaI.obqAg_BaES65U2WpWaJg18f_FO6zhgVjdkebyE
-
server_id
1302395575454666833
Targets
-
-
Target
https://github.com/moom825/Discord-RAT-2.0/
-
Discordrat family
-
A potential corporate email address has been identified in the URL: currency-file@1
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-