Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-01-2025 02:54
General
-
Target
89f38e7345a690d9a90c1473c6fb33ca9dd37d5a85b14679d79c1a1b89e7098e.exe
-
Size
78KB
-
MD5
ecc5ed7b4abc314b825a87af25180989
-
SHA1
6a048d7111b8228308a7218125e228d831abcddd
-
SHA256
89f38e7345a690d9a90c1473c6fb33ca9dd37d5a85b14679d79c1a1b89e7098e
-
SHA512
655577696b5b307f3b4fa94135947b9b43fa54cd43eba562776b04dd7098f33873fb51f78991886c939ed060bb0be7a482d091c10b72d7679cc2db596a2c24e7
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+gPICZ:5Zv5PDwbjNrmAE+EICZ
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMyNTAxMTIyOTk2NTY4MDcxMg.GVbtJu.NiHaLGAe8ngV52ERblctO7HS_Ax5yYvARm0euQ
-
server_id
1324735552167346220
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89f38e7345a690d9a90c1473c6fb33ca9dd37d5a85b14679d79c1a1b89e7098e.exe"C:\Users\Admin\AppData\Local\Temp\89f38e7345a690d9a90c1473c6fb33ca9dd37d5a85b14679d79c1a1b89e7098e.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
8KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
10.8MB