General
- Target w.zip
- Size 443KB
- Sample241203-n2e7hatqex
- SHA256 b32cfa2c536bfc631f37621471e23d3b05dffa1c94ef1c88e8136fd07c389105
- MD5 7abde2d9d772212f690e1657e66e4863
- SHA1 ce9629c02dbd6953ff5ab9ebc910409a4ebc488b
- SHA512 9f6e4bae303120161c98063a0049504dc09f74690ce81c65c8afbc5dfc3788b4058cac0527cda449707e2a79aeb9db695f27e6269bc23442c3b1455d87d51ffe
- SSDEEP 12288:ShJL3yGgLoSdDilX+F2ramKbYgMLj7llsLQn:kUGg8Uil/ramJhNn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
w/Obekräftade 445796.zip
Resource
win7-20240903-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
w/Obekräftade 445796.zip
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Release/Discord rat.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Release/Discord rat.exe
Resource
win10v2004-20241007-en
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
builder.exe
Resource
win7-20241010-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
builder.exe
Resource
win10v2004-20241007-en
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
dnlib.dll
Resource
win7-20240903-en
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
dnlib.dll
Resource
win10v2004-20241007-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target w/Obekräftade 445796.crdownload
- Size 445KB
- SHA256 c13a0cd7c2c2fd577703bff026b72ed81b51266afa047328c8ff1c4a4d965c97
- MD5 06a4fcd5eb3a39d7f50a0709de9900db
- SHA1 50d089e915f69313a5187569cda4e6dec2d55ca7
- SHA512 75e5f637fd3282d088b1c0c1efd0de8a128f681e4ac66d6303d205471fe68b4fbf0356a21d803aff2cca6def455abad8619fedc8c7d51e574640eda0df561f9b
- SSDEEP 12288:BfJ13+GoLo2d5ifXHE8134QwYOwFSFRiLQI:BKGo8EifSQwYWI
- MD5 SHA1 SHA512 SSDEEP
Score10/10Discordrat family
Executes dropped EXE
Loads dropped DLL
-
- Target Release/Discord rat.exe
- Size 79KB
- SHA256 2bd631c6665656673a923c13359b0dc211debc05b2885127e26b0dce808e2dec
- MD5 d13905e018eb965ded2e28ba0ab257b5
- SHA1 6d7fe69566fddc69b33d698591c9a2c70d834858
- SHA512 b95bfdebef33ac72b6c21cdf0abb4961222b7efd17267cd7236e731dd0b6105ece28e784a95455f1ffc8a6dd1d580a467b07b3bd8cb2fb19e2111f1a864c97cb
- SSDEEP 1536:YCH0jBD2BKkwbPNrfxCXhRoKV6+V+y9viwp:VUjBD2BPwbPNrmAE+MqU
- MD5 SHA1 SHA512 SSDEEP
Score10/10Discordrat family
-
- Target builder.exe
- Size 10KB
- SHA256 ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa
- MD5 4f04f0e1ff050abf6f1696be1e8bb039
- SHA1 bebf3088fff4595bfb53aea6af11741946bbd9ce
- SHA512 94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12
- SSDEEP 96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target dnlib.dll
- Size 1.1MB
- SHA256 4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a
- MD5 508ccde8bc7003696f32af7054ca3d97
- SHA1 1f6a0303c5ae5dc95853ec92fd8b979683c3f356
- SHA512 92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d
- SSDEEP 24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww
- MD5 SHA1 SHA512 SSDEEP
Score1/10
MITRE ATT&CK Enterprise v15
Tasks
static1
discordrat
Score
10/10
behavioral1
discordratpersistenceratrootkitstealer
Score
10/10
behavioral2
Score
1/10
behavioral3
discordratpersistenceratrootkitstealer
Score
10/10
behavioral4
discordratpersistenceratrootkitstealer
Score
10/10
behavioral5
discovery
Score
3/10
behavioral6
discovery
Score
3/10
behavioral7
Score
1/10
behavioral8
Score
1/10