discordrat | cb6d814bf564af56be38a29e93aebd665c29736179462cfb9f9b69f946af8466

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
13-12-2024 03:10

Target

LoaderBasic.exe
Size

92KB
MD5

46094da1bb8a34bf64fdf689691b2595
SHA1

9b95170dd9c718a14e49396a9f8a374e72357220
SHA256

cb6d814bf564af56be38a29e93aebd665c29736179462cfb9f9b69f946af8466
SHA512

0a1fb7d4d540161501978dde8a141ac899f35e3e8cce0a7a54d712592de9512e86392ed265811f44ecc930a42f17b96cf572d31901cde3646be19cedb99e1657
SSDEEP

1536:EbPuJtGN8F+9okEPBAqcBPDyc5I0bpAkAfLgbGNrE9xCIpOMel53:SuJkN8FwokzBBPDyc5RQgbGNrPlt

Score

10^/10

Family

discordrat

Attributes

discord_token
MTEyODc1NDE4NjI0MzI5NzMwMg.G_xQWE.8Vr08GKNWwCukUxcxGqNOzrKAxZRbWmAMlXKag
server_id
1316838123023630386

Discord RAT
A RAT written in C# using Discord as a C2.
stealer rootkit rat persistence discordrat
Discordrat family
discordrat

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1444 wrote to memory of 2268	1444	LoaderBasic.exe	30
PID 1444 wrote to memory of 2268	1444	LoaderBasic.exe	30
PID 1444 wrote to memory of 2268	1444	LoaderBasic.exe	30

C:\Users\Admin\AppData\Local\Temp\LoaderBasic.exe
"C:\Users\Admin\AppData\Local\Temp\LoaderBasic.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1444
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1444 -s 596
  2⤵
  PID:2268

memory/1444-0-0x000007FEF4F63000-0x000007FEF4F64000-memory.dmp

Filesize
4KB

Download
memory/1444-1-0x000000013F0E0000-0x000000013F0FC000-memory.dmp

Filesize
112KB

Download
memory/1444-2-0x000007FEF4F60000-0x000007FEF594C000-memory.dmp

Filesize
9.9MB

Download
memory/1444-3-0x000007FEF4F63000-0x000007FEF4F64000-memory.dmp

Filesize
4KB

Download
memory/1444-4-0x000007FEF4F60000-0x000007FEF594C000-memory.dmp

Filesize
9.9MB

Download
memory/1444-5-0x000007FEF4F60000-0x000007FEF594C000-memory.dmp

Filesize
9.9MB

Download