Analysis
-
max time kernel
10s -
max time network
9s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
29-12-2024 03:01
General
-
Target
skript.gg.exe
-
Size
78KB
-
MD5
c990246a458731db17076a8b666255fb
-
SHA1
33b79ed01d517367d506719540dba30f771873dc
-
SHA256
8585bb8848aa0c2781fc6da36706228ea1671b5c2948cbb187cb5d30ef95de3c
-
SHA512
7f1b446255b05f3782508609b458161c91fbb3947e857dc7d07f2acfe607f5aa9b23e612a4be4114b5309d0c5799c3aeeabd7a69443a5baf2d486dc2a255f4f7
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+nPIC:5Zv5PDwbjNrmAE+PIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMyMjcyODc4MjI5Mjk3OTc4Ng.GE88U7.ulsvrAdfL1eahjz3Rw0qPqT4z4-8lP3eeRH148
-
server_id
1322726821690736711
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\skript.gg.exe"C:\Users\Admin\AppData\Local\Temp\skript.gg.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB