General
-
Target
botter.zip
-
Size
28KB
-
Sample
250112-sc7bxaxjdv
-
MD5
9f17123dc224a53e3b754982951204e2
-
SHA1
cc350504bd1ec1eb05543e530b928861ff3a6542
-
SHA256
be5b74f1dcd692567847e16cb940b95e578f597db208069fff152f231bf942d5
-
SHA512
8b92445d2e7fedd56de4ee593cb0b8812cd7677b6694f9380ea399b1e58a6f8c58c2fb96806a43c8140992f6fd339ee6cad58f1e9e5a079898a42395a5827bf2
-
SSDEEP
768:pf/gFKX2k90h0F++nPoiWUYKt+PtVqotApgL:pXgFK+CbY06V5
Malware Config
Extracted
discordrat
-
discord_token
4D544D794D7A51314E5451304D7A49784D6A677A4D6A67344D412E47777A4D35482E686E7467374B6B4A644C7A496F516D38395F4C62725575584F6B38692D5A694C31572D57624D
-
server_id
1327726809084854434
Targets
-
-
Target
botter.exe
-
Size
78KB
-
MD5
8ebf44c3c47d368300e0d41c34296bf3
-
SHA1
fa5b7afe0f309a69344c52b0877be7fe35a35592
-
SHA256
2bd21a43c14023165182064239d919168353238b8e3027b72be4d47c5ec5c56c
-
SHA512
1b9d82a8b52ede86e79fb0cbf397036bca712d25777f26c243ed6aaa6a2c301011a12679d05ff79ad3a3944513cfa295922d4582f9de5daf86768d55465b0a68
-
SSDEEP
1536:1dK8EHG6SJNFrDCDopt4F4dhSc5Gr4ImshNzC/Eks0m0nbTdGFQngfo9wzWUbyVC:TK8EmBHpm0X40gUwhnzOspzyPCBf2hUv
Score10/10-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2
-