Analysis
-
max time kernel
93s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
22-02-2025 09:48
Behavioral task
behavioral1
Sample
Slip.cc2.exe
Resource
win7-20240729-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Slip.cc2.exe
Resource
win10v2004-20250217-en
3 signatures
150 seconds
General
-
Target
Slip.cc2.exe
-
Size
78KB
-
MD5
c8253bce24fc725a44dd1d7d4bcb37d1
-
SHA1
63e19c75281583c4aaf6bc36a6ca2bca30ba558f
-
SHA256
247d661d487938ff1419584c1ffa411de89ff5dcb40053d7be51e321d7bddfad
-
SHA512
6cfc09b61da4cb88bce3bc7b2c8b5afd59901e660ea51348865df81af3f0d5c3271e2a37cef0f324d3186cc07b1f78e240d3e0b8c8c3ae677127710cce77fc63
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+9PIC:5Zv5PDwbjNrmAE+tIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTM0Mjc0MDk3MzQ4MjAxNjg0MA.GPkOp9.jLGDelzjPDXfKBCbh7KnYItZqub2qGH7OR9IQo
-
server_id
1342765305788629043
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1672 Slip.cc2.exe