General
-
Target
https://github.com/moom825/Discord-RAT-2.0/releases/download/2.0/release.zip
-
Sample
241203-14ed7ssmhn
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/moom825/Discord-RAT-2.0/releases/download/2.0/release.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
15 signatures
1800 seconds
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMxMzYyOTcxODI1OTY5OTg2Mg.GvSuWQ.nyFJ9vVAZzI77fZN0xsHAESXsWlc-_VhOTFzxQ
-
server_id
1313629227496640575
Targets
-
-
Target
https://github.com/moom825/Discord-RAT-2.0/releases/download/2.0/release.zip
-
Discordrat family
-
A potential corporate email address has been identified in the URL: currency-file@1
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-