Analysis
- max time kernel
94s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
27/01/2025, 19:52
General
- Target seba.exe
- Size 78KB
- Sample250127-yldc3stkcs
- SHA256 ea0dfa0aa7c5442efd8b3cf0a553f83bbcdd5f64e9b96470f5e17d12edfdf945
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTMzMzE3NTA2MTQzOTQ0NzEwMQ.GF7IPf.28Nx_t4P-22zVkKEjaXGlf2UjTqkyWZJ-GTh8k
-
server_id
1333175340633423913
Signatures
- Discord RAT
A RAT written in C# using Discord as a C2.
- Discordrat family
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\seba.exe"C:\Users\Admin\AppData\Local\Temp\seba.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2844-0-0x00007FFE3D2D3000-0x00007FFE3D2D5000-memory.dmp
memory/2844-1-0x000001B975F60000-0x000001B975F78000-memory.dmp
memory/2844-2-0x000001B978640000-0x000001B978802000-memory.dmp
memory/2844-3-0x00007FFE3D2D0000-0x00007FFE3DD91000-memory.dmp
memory/2844-4-0x000001B978F40000-0x000001B979468000-memory.dmp
memory/2844-5-0x00007FFE3D2D3000-0x00007FFE3D2D5000-memory.dmp
memory/2844-6-0x00007FFE3D2D0000-0x00007FFE3DD91000-memory.dmp