General

  • Target

    Client-built.exe

  • Size

    78KB

  • Sample

    241217-ff6hka1mey

  • MD5

    d4443284e2fb8614bd69e81ba33a64d0

  • SHA1

    ff5d61b2dca8198d4b0f1d15524f412df811ceb7

  • SHA256

    c63001d44bf7fc5a44efe6bbd4469e7fb1f05406437bae5f842f82c73c22b003

  • SHA512

    bac41c41a6293401c7dcd2836dfccc65b09a72dcd7ff178d3305b6285f9d6e3f2a2011a4646dfeb39b2c19e76f01604eb1fac39882b26c0f80572796e6b238d8

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMxNzM0MDQ0MDQ3OTEzNzgyMg.G1moys.Gz7zK6g4DF0yUI_Mudj0FC6FLdLhqRD1yNb9Ts

  • server_id

    1317338709506654311

Targets

    • Target

      Client-built.exe

    • Size

      78KB

    • MD5

      d4443284e2fb8614bd69e81ba33a64d0

    • SHA1

      ff5d61b2dca8198d4b0f1d15524f412df811ceb7

    • SHA256

      c63001d44bf7fc5a44efe6bbd4469e7fb1f05406437bae5f842f82c73c22b003

    • SHA512

      bac41c41a6293401c7dcd2836dfccc65b09a72dcd7ff178d3305b6285f9d6e3f2a2011a4646dfeb39b2c19e76f01604eb1fac39882b26c0f80572796e6b238d8

    • SSDEEP

      1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC

    • Discord RAT

      A RAT written in C# using Discord as a C2.

    • Discordrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks