Analysis
- max time kernel
93s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
10/12/2024, 18:16
General
- Target 23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efe.exe
- Size 78KB
- Sample241210-wwpsrasnd1
- SHA256 23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efe
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTMxNDQwMjI2NzY1MDE5OTY0Mg.GJY-Qx.FOigqv8MqYoYnU9GcN78H2nn4LmOmkgDqu6EEQ
-
server_id
1310760753741041805
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Discordrat family
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efe.exe"C:\Users\Admin\AppData\Local\Temp\23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efe.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2220-0-0x00007FFE03253000-0x00007FFE03255000-memory.dmp
memory/2220-2-0x00000179C4580000-0x00000179C4742000-memory.dmp
memory/2220-1-0x00000179AA040000-0x00000179AA058000-memory.dmp
memory/2220-3-0x00007FFE03250000-0x00007FFE03D11000-memory.dmp
memory/2220-4-0x00000179C4DA0000-0x00000179C52C8000-memory.dmp
memory/2220-5-0x00007FFE03253000-0x00007FFE03255000-memory.dmp
memory/2220-6-0x00007FFE03250000-0x00007FFE03D11000-memory.dmp