Analysis
-
max time kernel
447s -
max time network
450s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
-
submitted
11-12-2024 23:24
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
3eb92b8497ddfee8e43939e890bf1976
-
SHA1
18aa6df7c8cc8f773f0bc9bec8d631c44fee4c5d
-
SHA256
5ea6afa4f123b4ea918aacafa133309a4850a3cf7cf7ee503e7712aaae893992
-
SHA512
cd40e0103e0f9f9669cd07139b60df631506931bd93c4d1f4ab3e2ab5ad2c488c56b465bec6d293dceb9b107b478a7545ad84a1b6db75b44441911ef4e3fb2c2
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMxNjUzMzkwMTg5MTYwNDU1MA.GI7iob.pcLDsMYuxjZxVDoarIHuAYwRBVhdbFfMxNY8K0
-
server_id
1316541708548313231
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB