Analysis
-
max time kernel
139s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
26/03/2025, 05:59
General
-
Target
65fc66dfab970d6022bb26f48537ed7e6d385aad9122913da2ee45c0791b2b47.exe
-
Size
78KB
-
MD5
de896de0d7b7b0dadd8350314628a563
-
SHA1
77db8c8d82180d70818942f8ac5fc52f38e3fb35
-
SHA256
65fc66dfab970d6022bb26f48537ed7e6d385aad9122913da2ee45c0791b2b47
-
SHA512
7b114a8f6150b6f9f5e5fcebc6d494e65da37225d3e748bb61dead341ec052fe37b4af0ef8e7020055d2cc35c3041ead1bdd7f10b25523b97b839a16cab23964
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC
Score
10/10
Malware Config
Extracted
Family
discordrat
Attributes
-
discord_token
MTM1MzcyNzI4NDkwNDg1MzU2NQ.GSH-8x.Mso_-5uQA9M5wYoyie2nFu7vlcE6eYd_H5IDz8
-
server_id
1353863900738617386
Signatures
-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65fc66dfab970d6022bb26f48537ed7e6d385aad9122913da2ee45c0791b2b47.exe"C:\Users\Admin\AppData\Local\Temp\65fc66dfab970d6022bb26f48537ed7e6d385aad9122913da2ee45c0791b2b47.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
5.2MB
-
Filesize
8KB
-
Filesize
10.8MB