Analysis

  • max time kernel
    93s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-12-2024 17:05

General

  • Target

    Moon/BootstraperRunmethenopenMoon.exe

  • Size

    78KB

  • MD5

    be484423fb9da2ded0ce793764f37802

  • SHA1

    911dfe225fb915847f497588a201db06e2fd787f

  • SHA256

    aff38167e9c702dab38347e95973ae16fa21b23f9bfa5874bf3f9b269e6a4b3a

  • SHA512

    a17a457d8d2f2a5bac799e3191c76d14fc955e9d95af2dc938a92b2bb668c97221aa87915c1e9fb65ad557e1cb3e8e41d6e0542b6853f78fb11331f32022746c

  • SSDEEP

    1536:NzGsO8XbEXMsLkbvNrfxCXhRoKV6+V+Y15:NqbkbvNrmAE+o5

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMwOTY1NDI0NzE0Njc4MjczMw.GdCiWO.QDjWo8z0Xk0JdOHCguuepaT0RNYGA63CrYGXZo

  • server_id

    1280835675205406823

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Moon\BootstraperRunmethenopenMoon.exe
    "C:\Users\Admin\AppData\Local\Temp\Moon\BootstraperRunmethenopenMoon.exe"
    1⤵
      PID:4164

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4164-0-0x00007FFA4CE53000-0x00007FFA4CE55000-memory.dmp

      Filesize

      8KB

    • memory/4164-1-0x0000018BB4BB0000-0x0000018BB4BC8000-memory.dmp

      Filesize

      96KB

    • memory/4164-2-0x0000018BCF210000-0x0000018BCF3D2000-memory.dmp

      Filesize

      1.8MB

    • memory/4164-3-0x00007FFA4CE50000-0x00007FFA4D911000-memory.dmp

      Filesize

      10.8MB

    • memory/4164-4-0x00007FFA4CE50000-0x00007FFA4D911000-memory.dmp

      Filesize

      10.8MB