Analysis
- max time kernel
46s - max time network
48s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
12/12/2024, 22:59
General
- Target Client-built.exe
- Size 78KB
- Sample241212-2yc5mazpas
- SHA256 ddd2477259e950eeb8e806930569e414699e2fa134dcb6c791fa804b75bf2ffd
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTMwMzEzNTAzMjExMzc1ODI5OQ.GCUXSI.XkDHqJrTU-zexe-gseKtbtUZ0r7B1Itzhg2SHQ
-
server_id
1266612032933990454
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Discordrat family
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1888-0-0x00007FFAABF93000-0x00007FFAABF95000-memory.dmp
memory/1888-1-0x0000018159360000-0x0000018159378000-memory.dmp
memory/1888-2-0x00000181739F0000-0x0000018173BB2000-memory.dmp
memory/1888-3-0x00007FFAABF90000-0x00007FFAACA51000-memory.dmp
memory/1888-4-0x00000181740F0000-0x0000018174618000-memory.dmp
memory/1888-5-0x00007FFAABF90000-0x00007FFAACA51000-memory.dmp