Overview

overview

10

Static

static

3

badassfuckingtien.exe

windows7-x64

10

badassfuckingtien.exe

windows10-2004-x64

10

Resubmissions

11/01/2025, 03:20

250111-dvq1ba1mey10

28/12/2024, 14:10

241228-rgpf8aykhw10

28/12/2024, 14:06

241228-reet1aypfr10

17/12/2024, 17:57

241217-wjr3catlhs10

04/12/2024, 11:26

241204-nj75katpgs10

04/12/2024, 11:05

241204-m67lwaynak10

Sharing

Copy URL Twitter E-mail

General

  • Target
    skibidi.rar
  • Size 620KB
  • Sample241228-rgpf8aykhw
  • SHA256 2f294b7dd8df80c19dcf8e338049f55787492e70e39eca8f8dc731b3c6addc83
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
discordratdiscoverypersistenceratrootkitstealer

Malware Config

Extracted

Family

  • discordrat

Attributes
  • discord_token

    MTMxMzYwMzQzNTY5MzYwOTEwMg.G0k280.tlujv7Qu1u6uHZMDdDCuyzSTaLQITkGmfU0u3s

  • server_id

    1312325986385264681

Targets

    • Target
      badassfuckingtien.exe
    • Size 840KB
    • SHA256 5c8b1d9c70780e1e669b4b34b0e190f6a691b8ada42179e248513feafe5b9ee5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discordratpersistenceratrootkitstealerdiscovery

    • Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Discordrat family

      discordrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks