discordrat | 7728affef21fc8c547a2646849a8e462d1217d6e85d4578a23ed71db7b77d467 | Triage

Sharing

General

Target

Bootstrapper.exe
Size

78KB
Sample

250214-ya5m7axpgw
MD5

0333cbd175b140dbd2e1f40da264c47e
SHA1

3d5652f50a57aea4c61942a6857a29556d349b24
SHA256

7728affef21fc8c547a2646849a8e462d1217d6e85d4578a23ed71db7b77d467
SHA512

60b64f020a9b013ef642576ad29f1caf363b0be7679bc1b64ec70a2d88abfbffd64523c6d84b0be7c739318dd85e3de1f0dec26de14f203c51879b22e3dc4e6b
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+GPIC:5Zv5PDwbjNrmAE+iIC

Score

10^/10

discordrat discovery persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTM0MDAzOTE0NDU4NzY2MTQ1OQ.G0CIRd.IdjzlDfdFrEFamtcSN6jYxt5znz8nrXxghsww8
server_id
1340039546653380752

Targets

- Target
  
  Bootstrapper.exe
- Size
  
  78KB
- MD5
  
  0333cbd175b140dbd2e1f40da264c47e
- SHA1
  
  3d5652f50a57aea4c61942a6857a29556d349b24
- SHA256
  
  7728affef21fc8c547a2646849a8e462d1217d6e85d4578a23ed71db7b77d467
- SHA512
  
  60b64f020a9b013ef642576ad29f1caf363b0be7679bc1b64ec70a2d88abfbffd64523c6d84b0be7c739318dd85e3de1f0dec26de14f203c51879b22e3dc4e6b
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+GPIC:5Zv5PDwbjNrmAE+iIC
Score

10^/10

discordrat persistence rat rootkit stealer discovery
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratdiscoverypersistenceratrootkitstealer