discordrat | 40c9551ed60b27c2bafa038230fdaa69dc0123f7ee99a441ffbf3403aa571c5b

General

Target
2026-08-13_e3eb6e66d31d9923b4254e0dd3b2e5fd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
Size 564KB
Sample260813-11k3ksdf44
SHA256 40c9551ed60b27c2bafa038230fdaa69dc0123f7ee99a441ffbf3403aa571c5b
MD5 e3eb6e66d31d9923b4254e0dd3b2e5fd
SHA1 8320c09eeab1183b0ca1e68cc8b514a1da0e6a68
SHA512 59cc0e3e7606b87b0fc0fca077e333eb7581c9f8485fa5690ee366437ac3262606b169c023fb14bdbbcd2e790199f08bde104e74d66b3492ff3da56ccaa95853
SSDEEP 12288:qmiMZvN43+u85Bpw+YMRkc9BWnBjjkLAeYJ5819hT:jnvS+55BpfRX9BWnBjjuAeZx
TLSH
T183C4AF19D7E405FDE1B7E578CD834912EB76784907B1E78F03A099A61F272A08E3DB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTUzNjk2MDQyODMzOTQ5OTAzOQ.GM0GK5.MrXFsjCnaKcahvnMLZEd3U0v5UzWsOyTWIvVHQ
server_id
1536801723367166095

Targets

- Target
  2026-08-13_e3eb6e66d31d9923b4254e0dd3b2e5fd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 564KB
- SHA256 40c9551ed60b27c2bafa038230fdaa69dc0123f7ee99a441ffbf3403aa571c5b
- MD5 e3eb6e66d31d9923b4254e0dd3b2e5fd
- SHA1 8320c09eeab1183b0ca1e68cc8b514a1da0e6a68
- SHA512 59cc0e3e7606b87b0fc0fca077e333eb7581c9f8485fa5690ee366437ac3262606b169c023fb14bdbbcd2e790199f08bde104e74d66b3492ff3da56ccaa95853
- SSDEEP 12288:qmiMZvN43+u85Bpw+YMRkc9BWnBjjkLAeYJ5819hT:jnvS+55BpfRX9BWnBjjuAeZx
- TLSH
  T183C4AF19D7E405FDE1B7E578CD834912EB76784907B1E78F03A099A61F272A08E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery discordrat persistence rat rootkit stealer
- Family: Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Detects executables containing URLs to raw contents of a Github gist
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

4

T1082

System Time Discovery

1

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Discord RAT

Detects executables containing URLs to raw contents of a Github gist

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2