Overview

overview

10

Static

static

3

2026-07-30...lc.exe

windows10-2004-x64

10

2026-07-30...lc.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-30_933687e639b848298f97b6223fe3e878_cryptbot_icedid_luca-stealer_njrat_stealc
  • Size 34.3MB
  • Sample260730-brplzaaa35
  • SHA256 ad795a41f1c3e5cf7a1e505caf3fdd44a438150f61e88fda060cf36c6c9abd75
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discordratdiscoverypersistenceratrootkitstealer

Malware Config

Extracted

Family

  • discordrat

Attributes
  • discord_token

    MTQ4NDUxMTk3NTg0NDA4OTg1Ng.GAJhaQ.qo6TmXVqlYnswCv27DvUqqrDc7ubC1OdlnC8UU

  • server_id

    1484514542733099130

Targets

    • Target
      2026-07-30_933687e639b848298f97b6223fe3e878_cryptbot_icedid_luca-stealer_njrat_stealc
    • Size 34.3MB
    • SHA256 ad795a41f1c3e5cf7a1e505caf3fdd44a438150f61e88fda060cf36c6c9abd75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discordratpersistenceratrootkitstealerdiscovery

    • Family: Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Detects executables containing URLs to raw contents of a Github gist

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks