Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://github.com/d...

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://github.com/dsmarra44-cell/Soleware/raw/refs/heads/main/soulware.exe
  • Sample260417-22d64ads2z
Score
10/10
discordratdiscoverypersistenceratrootkitspywarestealer

Malware Config

Extracted

Family

  • discordrat

Attributes
  • discord_token

    MTQ4Mjg2OTQ2NDUzMjkxMDIxMA.GgTIOG.usZHdg-mi4DRql4ydUFCtADKHl7QT0-96nJxnU

  • server_id

    1482870525217870018

Targets

    • Target
      https://github.com/dsmarra44-cell/Soleware/raw/refs/heads/main/soulware.exe
    Score
    10/10
    discoverydiscordratpersistenceratrootkitspywarestealer

    • Family: Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks