discordrat | ce28faa42ddd232b9eaaa74f541973210c43556831a8b6242bba90581db75675 | Triage

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

250222-s2sj2stjar
MD5

b7d931632ff3d8290ea3c8f3b25e5e38
SHA1

b7a0a8c5f44566b5b40715b86fbc96f2ff76cc16
SHA256

ce28faa42ddd232b9eaaa74f541973210c43556831a8b6242bba90581db75675
SHA512

a32e85fff24697c35ed0afd05b47fce0a6bada22fab651e3bfb33087335866815ae26f922bfbfb9e3ef6fb2be6e99d6f7a29de619922334127e703b592110d57
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+wPIC:5Zv5PDwbjNrmAE+0IC

Score

10^/10

discordrat persistence rat rootkit stealer

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTM0Mjg2NTI4Mjg4NDE3MzkzNQ.GO--qR.B-Xy2KTyXU4BF-yf93wQlD_kexcbEVrhnYBv_o
server_id
1342834826075570286

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  b7d931632ff3d8290ea3c8f3b25e5e38
- SHA1
  
  b7a0a8c5f44566b5b40715b86fbc96f2ff76cc16
- SHA256
  
  ce28faa42ddd232b9eaaa74f541973210c43556831a8b6242bba90581db75675
- SHA512
  
  a32e85fff24697c35ed0afd05b47fce0a6bada22fab651e3bfb33087335866815ae26f922bfbfb9e3ef6fb2be6e99d6f7a29de619922334127e703b592110d57
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+wPIC:5Zv5PDwbjNrmAE+0IC
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer