discordrat | 28f9130367f3f962a2456d46c81c4c69b9d8f9da612eb6151a5cc0326255d0e0 | Triage

Sharing

General

Target

16e0775352021a90c3dec5a4d75d5db0b444ed8cae060fccdb86fde2080bdc82.zip
Size

28KB
Sample

250126-vwtahaymer
MD5

7f6c5972dcab79a6dbc6a9202970ad14
SHA1

75f4c443f51d3d74387b14a03b8737088099277e
SHA256

28f9130367f3f962a2456d46c81c4c69b9d8f9da612eb6151a5cc0326255d0e0
SHA512

a31351e2e1ded76b178636b3f31264acaa4b2f3aa38e441abb67f7d47b6ae3fe392170591d5873270fb330e18a1ffc5bf9f83c1800c90c216ef293b6bc317b58
SSDEEP

768:RaWcZSjyBrdhwmqDVps4M//X9aAV9vqkTVRgnuo4x0Idv:RaWcZSWVdhZiHNM//cAVxTV9buIh

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTMzMDYxOTg4NTMzMTQxNTEyMA.GvolIj.JCM-OtlpaFBedk3GoFB_aY1Hi31oF4XpkLv81A
server_id
1330576263034699828

Targets

- Target
  
  16e0775352021a90c3dec5a4d75d5db0b444ed8cae060fccdb86fde2080bdc82.exe
- Size
  
  78KB
- MD5
  
  e3347a9a35a3397e489ae738b27f7cc7
- SHA1
  
  e72a6f4f1fed3513aeef20986cb362e5d2fdfebe
- SHA256
  
  16e0775352021a90c3dec5a4d75d5db0b444ed8cae060fccdb86fde2080bdc82
- SHA512
  
  a75da2b099bef712bcf87c02aa23e84d5d90f5b0a9e5bb0a27b437ddd6ad777768a1273052e72a720e141db61c4f0ebbe50316df069253afc675a7e46bbb3151
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer