Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-01-2025 19:48
General
-
Target
WzAio.exe
-
Size
343KB
-
MD5
de95907b1b7f19a112ba55e414b11528
-
SHA1
5480bda626776b487e9419e36a8a5ee5752d5f13
-
SHA256
b180d7576e2bda6d34fddc8d46d3adaa407b09eafc51d91775c4ab1be584c03c
-
SHA512
0c1b4f72e58439c399e2479e95d4bb45cd52bee7932ac559e12ed30ab86915c72ae54f58b14b5dc597eede6c79938269fc9de948d5cb6b9a0e2e4499e4d9e3a9
-
SSDEEP
6144:Qv5PDwbBrGInX/EUfvhYacccccqKUygN+4BbV9+lsDX86A3cYTWREXPWUjlaRp2s:Qv5MnvjH1C4wiDX893v6REXeUMP
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMyMzI1ODg0Mzk3NDg2NDk4Ng.GZ06ew.muqC2L5A-Hr2cT2WYwTwCx671zJJMrtSI5VSD4
-
server_id
1323258690882502736
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WzAio.exe"C:\Users\Admin\AppData\Local\Temp\WzAio.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
360KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB