Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15-12-2024 23:47
General
-
Target
23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efeN.exe
-
Size
78KB
-
MD5
8cf701336d914db6d0d8fd991fb65680
-
SHA1
bd86597a94eb3f95a55daadf0e5d909cc5216c85
-
SHA256
23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efe
-
SHA512
2d1dc6ca19f519360d4b08aff146999af53ec8e623dc257a9b0316b166e2f8fd3918dd324877d8003d6f5c92b96f88697729d8710b0e42662db0a6196813cb37
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+tPICZ:5Zv5PDwbjNrmAE+9ICZ
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMxNDQwMjI2NzY1MDE5OTY0Mg.GJY-Qx.FOigqv8MqYoYnU9GcN78H2nn4LmOmkgDqu6EEQ
-
server_id
1310760753741041805
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efeN.exe"C:\Users\Admin\AppData\Local\Temp\23d83d431b311011520ca0e3e44367f273caec8d9ffc29d23a0f83d5ffc75efeN.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
10.8MB