discordrat | 2d1f7b06c08058706f5b24f482bd1adfd69573451a762a424f48843896a3f798 | Triage

Submit
Reports

Overview

overview

Static

static

release.zip

windows10-ltsc 2021-x64

Sharing

General

Target

release.zip
Size

445KB
Sample

241208-vj3neavjhj
MD5

f674b9eb0f6aec721d628ce6bde2e2c5
SHA1

5c08090d16b02b092f5c0cfddfa6c22791af8c98
SHA256

2d1f7b06c08058706f5b24f482bd1adfd69573451a762a424f48843896a3f798
SHA512

b7e8ab7fa100924b7aeb246687946afc1b605facea30e4b2f1a2d81b325c33ba490d2bb1cb2e1a1ce7a349cd5ca03b1cd3580b9de44f5368adce333963253b41
SSDEEP

12288:BfJ13+GoLo2d5ifXHE8134QwYOwFSFRiLQH:BKGo8EifSQwYWH

Score

10^/10

discordrat discovery persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

release.zip

Resource

win10ltsc2021-20241023-en

discordrat discovery persistence rat rootkit stealer

windows10-ltsc 2021-x64

14 signatures

300 seconds

Malware Config

Targets

- Target
  
  release.zip
- Size
  
  445KB
- MD5
  
  f674b9eb0f6aec721d628ce6bde2e2c5
- SHA1
  
  5c08090d16b02b092f5c0cfddfa6c22791af8c98
- SHA256
  
  2d1f7b06c08058706f5b24f482bd1adfd69573451a762a424f48843896a3f798
- SHA512
  
  b7e8ab7fa100924b7aeb246687946afc1b605facea30e4b2f1a2d81b325c33ba490d2bb1cb2e1a1ce7a349cd5ca03b1cd3580b9de44f5368adce333963253b41
- SSDEEP
  
  12288:BfJ13+GoLo2d5ifXHE8134QwYOwFSFRiLQH:BKGo8EifSQwYWH
Score

10^/10

discordrat discovery persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratdiscoverypersistenceratrootkitstealer

© 2018-2024

Terms | Privacy