General
-
Target
250331-sesarsste1_pw_infected.zip
-
Size
28KB
-
Sample
250331-sp5zlsvny2
-
MD5
0fc520d37a2f7908364c91d9bda7e26f
-
SHA1
b074fe0e8dc8de637fea4c97bfbce0597293258e
-
SHA256
41dd10f555a42b65726a755e7bdac4928b35a5151cf3ab30cae7a42738a631e2
-
SHA512
1932027b661449d6b80d6862c217f191617b66ab5bec3173738a88d87065a0358f24f9d478498cc0ce752c7cf5b44e94beee1fbdd518a2c811b1f319235dd29f
-
SSDEEP
384:Sm/e457aaBQFiZ83EBfhbKG9XVg9kI4sFTUNX/7bjKbPYrXzxML8P+WTnH56/KOf:Smx7MZ30hbKWY9MbzrXGL8pnZ6yfKB
Malware Config
Extracted
discordrat
-
discord_token
MTM1NjI4MTg2NTE3ODMxNjgyMA.GeoxaT.ocqOcSIpXr6UreUuaB7hoXHmcnhfEknTw6-SuE
-
server_id
1356279473779245056
Targets
-
-
Target
Client-built.exe
-
Size
78KB
-
MD5
7943c195a125d0684b7f139d22485d30
-
SHA1
d8e99c1d9c3fc1b3d54932510e8c15ef35326610
-
SHA256
88d0b715a36832b0e69d30b180dd927800969ab1f0e3b21e584cd8033373dcca
-
SHA512
1c563a84162fed409ed9dcd5c76c031ebf03ed0309f554ff7662421412ea213d310dd01fa5e8dfa4256bfe71ca5406d759446006cb13c36b84c974d0b48befff
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+UPIC:5Zv5PDwbjNrmAE+IIC
Score10/10-
Discord RAT
A RAT written in C# using Discord as a C2.
-
Discordrat family
-
Legitimate hosting services abused for malware hosting/C2
-