discordrat | 0cea9e6c50efcde8e6801e2729428b6157cb85738cfa80851c81863841705525 | Triage

Sharing

General

Target

Pczerodelayandfpsboost.exe
Size

78KB
Sample

250222-hfsmtazmet
MD5

072b00541611295a47a4bc8cbece5afe
SHA1

3380560cd00044a55e30bd7c05073af67fef0249
SHA256

0cea9e6c50efcde8e6801e2729428b6157cb85738cfa80851c81863841705525
SHA512

c0169ed886721bd7f0828e974f49f11f09cd8fba3c30cf58f97db31303e3321e319a6dd31b1e2375f74713d48b8d77d504b8397af783f458048c42878f93a09e
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+JPIC:5Zv5PDwbjNrmAE+5IC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTM0MjcyMDgzMDE5NDU4MTU3NA.GXfcnV.itHprr2qZ9-zDbUsvX8_xwZ4Xnz0UiudyyLtgc
server_id
1342721175717023816

Targets

- Target
  
  Pczerodelayandfpsboost.exe
- Size
  
  78KB
- MD5
  
  072b00541611295a47a4bc8cbece5afe
- SHA1
  
  3380560cd00044a55e30bd7c05073af67fef0249
- SHA256
  
  0cea9e6c50efcde8e6801e2729428b6157cb85738cfa80851c81863841705525
- SHA512
  
  c0169ed886721bd7f0828e974f49f11f09cd8fba3c30cf58f97db31303e3321e319a6dd31b1e2375f74713d48b8d77d504b8397af783f458048c42878f93a09e
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+JPIC:5Zv5PDwbjNrmAE+5IC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer