Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 02:37
General
-
Target
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe
-
Size
78KB
-
MD5
74690cdf2edc26f42d100325241e1117
-
SHA1
6905ea513cf4a9fcf94f5efff1933fdaf5e980f5
-
SHA256
520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4
-
SHA512
1af915c6d421e5a3bb003985e513eaeb9a101a2006a2e338ae172da145ad98b2139bbca7e42a18b926ed7b489f6dcb347e85e6695f2f60ac7f80b0816110f255
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTIwMjY2NDA1NTE5ODg0NzAzNw.GBgvm-.FTCvKdBZdhUCywGcaCtSocdcqrjxGR0rEILNeA
-
server_id
1202543313526464574
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe"C:\Users\Admin\AppData\Local\Temp\520c9121e4236117c2784be4d856a7d819b5f614e6469a86edcceccacb9771d4.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB