discordrat | a4dd4197be7f40d3abaaed97c0ea6ae3f0b532982038e24ce1a53ebe481967dc | Triage

Submit
Reports

Overview

overview

Static

static

Client-built.exe

windows7-x64

Client-built.exe

windows10-2004-x64

Sharing

General

Target

Client-built.exe
Size

78KB
Sample

250327-cp7v7swvay
MD5

c907de67dc2e803be97478576db2a190
SHA1

9d6c48e1e4ec6ca53c5dea48f6c1131f7a926689
SHA256

a4dd4197be7f40d3abaaed97c0ea6ae3f0b532982038e24ce1a53ebe481967dc
SHA512

229f3054f1d5ee5bc4c6250291c47d3426617c48a5415e3c527a4cd069b9887a9010ed4dc6a7da858e0e7264555d8465515ab4c17c81cf64a858575760750b4d
SSDEEP

1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+BPIC:5Zv5PDwbjNrmAE+RIC

Score

10^/10

discordrat discovery persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Client-built.exe

Resource

win7-20240903-en

discordrat persistence rat rootkit stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Client-built.exe

Resource

win10v2004-20250314-en

discordrat discovery persistence rat rootkit stealer

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTM1MzgwODUxMjM2NjQxMTc5Ng.G9rKeW.pTwvhYCM6HQkgqve7Nz63_p5459NDiNG4PKoAM
server_id
1354578979142631616

Targets

- Target
  
  Client-built.exe
- Size
  
  78KB
- MD5
  
  c907de67dc2e803be97478576db2a190
- SHA1
  
  9d6c48e1e4ec6ca53c5dea48f6c1131f7a926689
- SHA256
  
  a4dd4197be7f40d3abaaed97c0ea6ae3f0b532982038e24ce1a53ebe481967dc
- SHA512
  
  229f3054f1d5ee5bc4c6250291c47d3426617c48a5415e3c527a4cd069b9887a9010ed4dc6a7da858e0e7264555d8465515ab4c17c81cf64a858575760750b4d
- SSDEEP
  
  1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+BPIC:5Zv5PDwbjNrmAE+RIC
Score

10^/10

discordrat persistence rat rootkit stealer discovery
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Discordrat family
  discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratdiscoverypersistenceratrootkitstealer

© 2018-2025

Terms | Privacy