Analysis

  • max time kernel
    94s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-12-2024 17:45

General

  • Target

    Discord rat.exe

  • Size

    91KB

  • MD5

    80048059f4ed134be347f0544c5fd64e

  • SHA1

    fc99f4158fa9930a0fb556ff4613d922badf8b1a

  • SHA256

    84e09deed55461265fda7225702e139389a1f3a76c0918e0901e31ba60c11513

  • SHA512

    4bb746d0218c879d0993fafcd43ec1b18e31b0d21115713830e8567e5d91fecec70620f3e2faee632fea0d3fb201b61df12e48fa82ebaa20737df2e1faa3f2a4

  • SSDEEP

    1536:GXKQ2FNJQ4FLHv1xCtRE9PLlX/k0SbIANrRW+uexCxoKV6+f2EnR:xQsDQ4FLHKTE9D5/ZSbIANrw+bS2c

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAANkquobZQzEeoYHKoo4wB7AAAAAACAAAAAAAQZgAAAAEAACAAAACemkp4iDrsoXJPzkokwYj0Gy59zv3FWRLnEOEDwykvYgAAAAAOgAAAAAIAACAAAADDrPXhbmFp93CKXINBvLA1vKOVSp8IEn69nPBtLXvnX1AAAADZ/rJIfqLOheV2wzVnC3woWJp4CbP6wPZmNKBNnTXxZdzTSH7343+anM6AP6Fc1BgZ996IaIUGayXGxPss5H/Y+RbPwPvykaYYIk48wX6gskAAAABGnm+P5BLnHkrzjmHNSj9Iuw0yVmhvXMofO7NUSZ4KB89EZmm/RKbt7e9VwRtZlQO+AUVImWDOUdVgj90CeIJe

  • server_id

    1314272379903414344

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Discord rat.exe
    "C:\Users\Admin\AppData\Local\Temp\Discord rat.exe"
    1⤵
      PID:3864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3864-1-0x000001C11C8B0000-0x000001C11C8CC000-memory.dmp

      Filesize

      112KB

    • memory/3864-0-0x00007FFB33813000-0x00007FFB33815000-memory.dmp

      Filesize

      8KB

    • memory/3864-2-0x000001C136F10000-0x000001C1370D2000-memory.dmp

      Filesize

      1.8MB

    • memory/3864-3-0x000001C11E4B0000-0x000001C11E500000-memory.dmp

      Filesize

      320KB