Analysis
-
max time kernel
92s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2025 13:10
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20241010-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20250129-en
3 signatures
150 seconds
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
7a178513677d2f625c574caed05e1ce1
-
SHA1
7a753a3943d23b55272975c693356f95f029bf70
-
SHA256
7c8de41a331b2beb7b22c9d494f46eab215f6684fdce0e79d4ad8321323e100d
-
SHA512
f8f875c9b40371afb0d2257c170469dd1f1cef64c33a20a9f5921e5615dbf132b13992cd35840db7efdce80a301aa387baf357391a86fbb63f9ee3acf6abf23a
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+/PIC:5Zv5PDwbjNrmAE+HIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTMzNDg2ODQ0OTQ4MjI0ODI1NA.GqRuir.m1LgjbdeFUMKWpZprOQy-MTZpg_vlVOqClUMFo
-
server_id
1334871161179344908
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4628 Client-built.exe