Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2025, 18:00
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
4a3ad9a17023d32b70d14c88747b0302
-
SHA1
a24fdb9e259d5db66a00aa392aea4b146a697787
-
SHA256
45e83d1277abd0a69f5a33f0cc20c51f804bbd26e9a0686117247ad4f27ed81a
-
SHA512
ee86349f849c0edf7a1c1080f71e12e8c659c6cffec168a3e6da5eaf52f9ecac69d0b2b7c01d69e282d6f44ad890cf60f080fd11b425fb93a74e0b7218d6070b
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+iPIC:5Zv5PDwbjNrmAE+OIC
Malware Config
Extracted
discordrat
-
discord_token
MTMyNzMxODAyNTIyMDkxNTIyMA.Gbhmly.2VnF8G_nnJt-kiY3NLK0toQR92qky0l7vAaT4Y
-
server_id
1327319098295582744
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1460 Client-built.exe