Analysis

  • max time kernel
    98s
  • max time network
    130s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    14-12-2024 17:29

General

  • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    3b7e0b98544ee6b947bbed5fae4ac6e5

  • SHA1

    ba5616f8ae0d7691fdd0f81e593de881bd05ef9e

  • SHA256

    47ae3d57c6087ba58b325aaa090f24adaf73318c69f9bc21dc9df6c38cd7d2e5

  • SHA512

    322d1e1b673d6570a16fd37b3e4ef90a98f6ecf81ba150d97eec2a91d7dc44c6fe90d84618b8c23c5c5a0ebf1a7b89e2eb1ff011c07781dd382c89d1630e47ee

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+YPIC:5Zv5PDwbjNrmAE+8IC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMxNzU0MjQwODMzMzk1MTA3Nw.Grw-k4._k55Z5UHiOIlfgu1Lz0Y2IHI5Gq0xSBzMXZRQM

  • server_id

    1317542263232004146

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Client-built.exe
    "C:\Users\Admin\AppData\Local\Temp\Client-built.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5008-0-0x00007FFDB7AC3000-0x00007FFDB7AC5000-memory.dmp

    Filesize

    8KB

  • memory/5008-1-0x000002269A7C0000-0x000002269A7D8000-memory.dmp

    Filesize

    96KB

  • memory/5008-2-0x00000226B4D70000-0x00000226B4F32000-memory.dmp

    Filesize

    1.8MB

  • memory/5008-3-0x00007FFDB7AC0000-0x00007FFDB8582000-memory.dmp

    Filesize

    10.8MB

  • memory/5008-4-0x00000226B55C0000-0x00000226B5AE8000-memory.dmp

    Filesize

    5.2MB

  • memory/5008-5-0x00007FFDB7AC3000-0x00007FFDB7AC5000-memory.dmp

    Filesize

    8KB

  • memory/5008-6-0x00007FFDB7AC0000-0x00007FFDB8582000-memory.dmp

    Filesize

    10.8MB