Analysis

  • max time kernel
    104s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2025, 13:10

General

  • Target

    Discordrat.exe

  • Size

    78KB

  • MD5

    2d1d18365fe1c507b677de17323f08b1

  • SHA1

    83418952aa584c29309853280db5b64dcc812535

  • SHA256

    b9e94e44768a73aacf68786118d898dfb3f2c7223737b2a41ea3aa3f1debcabd

  • SHA512

    db14d84fb1267ccd6d9b0de68e9faebb10841728300cea831b297f710084962292c6786a2a4c0ec00c1f921169d5a032675d048c6dd5ca2c8055e07bb2d26f1f

  • SSDEEP

    1536:58+ycDpi6qczE62Ti0F6/076q5lS7pHacGiNPAQHVhampStsuGanHrRY7fg0pUDu:5jycDpi6qczE62TxF6/076q5lS7pHacn

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTM2MjQwNzY0NzA1MTI1MTc3Mg.G-bYfp.u0DPoJkBL0aIvMvFjYtsKR8zIUixwvPB4WsTYg

  • server_id

    1351601990072795178

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Discordrat.exe
    "C:\Users\Admin\AppData\Local\Temp\Discordrat.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1340-0-0x00007FF910E33000-0x00007FF910E35000-memory.dmp

    Filesize

    8KB

  • memory/1340-1-0x0000015FD33D0000-0x0000015FD33E8000-memory.dmp

    Filesize

    96KB

  • memory/1340-2-0x0000015FEDAE0000-0x0000015FEDCA2000-memory.dmp

    Filesize

    1.8MB

  • memory/1340-3-0x00007FF910E30000-0x00007FF9118F1000-memory.dmp

    Filesize

    10.8MB

  • memory/1340-4-0x0000015FEE2E0000-0x0000015FEE808000-memory.dmp

    Filesize

    5.2MB

  • memory/1340-5-0x00007FF910E33000-0x00007FF910E35000-memory.dmp

    Filesize

    8KB

  • memory/1340-6-0x00007FF910E30000-0x00007FF9118F1000-memory.dmp

    Filesize

    10.8MB