Overview

overview

10

Static

static

10

Discordrat.exe

windows7-x64

10

Discordrat.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Discordrat.exe

  • Size

    94KB

  • Sample

    241219-3hrhrasrhx

  • MD5

    6f1c3ac58e43e1b747d27a93a55da406

  • SHA1

    618cc62c82aa567ba64ccdf0ac502adf7a88192f

  • SHA256

    9284d1e75a0b5d6fb4b0b0bf9efafab147f83dc2a425cf8df49da5dbac5dc784

  • SHA512

    28043448ae926a1cdd1a919ecff16268d890d77b72c3ef3871cf7612a31666db8cde9db20992e9364bfddbcd220c309c8f9bc6ec7e46aeb639c08c4098722ecd

  • SSDEEP

    1536:66BxWNm6REP+bp/csCi7OFZ+Aqbd6btyRe46xbVXPrG+czxCxoKV6+UFU19:6vcK7+ZD/txbVXPrG+0NFUj

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Targets

    • Target

      Discordrat.exe

    • Size

      94KB

    • MD5

      6f1c3ac58e43e1b747d27a93a55da406

    • SHA1

      618cc62c82aa567ba64ccdf0ac502adf7a88192f

    • SHA256

      9284d1e75a0b5d6fb4b0b0bf9efafab147f83dc2a425cf8df49da5dbac5dc784

    • SHA512

      28043448ae926a1cdd1a919ecff16268d890d77b72c3ef3871cf7612a31666db8cde9db20992e9364bfddbcd220c309c8f9bc6ec7e46aeb639c08c4098722ecd

    • SSDEEP

      1536:66BxWNm6REP+bp/csCi7OFZ+Aqbd6btyRe46xbVXPrG+czxCxoKV6+UFU19:6vcK7+ZD/txbVXPrG+0NFUj

    Score
    10/10
    discordratpersistenceratrootkitstealer

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Discordrat family

      discordrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks