Analysis
-
max time kernel
55s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
28-01-2025 01:30
General
-
Target
matcha (cracked version).exe
-
Size
78KB
-
MD5
d10c0cba07a9045f70eeb19a6bc2f703
-
SHA1
a2a9c919adb704df40a4c3639c7d096100d72a7b
-
SHA256
d8c209995de6183ed8a8b8d1b9c00dd579d9be234e53ee4434594b61316303fe
-
SHA512
172a0b233b5078cc65beaf369c18d24dca11241a6b6d345d343e1ed7165f34cc30be103a159294a288507ee88f46de3e6f0e2b194ede51d17612d536a31c3a9c
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+YPIC:5Zv5PDwbjNrmAE+8IC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMyODc5Mzk3MDI4NDk1MzY0MA.GhqsV4.13mA2LtQ6a7mV61HJRU_YgCDDtklHY36T8nFoM
-
server_id
1328793805209731173
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\matcha (cracked version).exe"C:\Users\Admin\AppData\Local\Temp\matcha (cracked version).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB