General
- Target discord_rat.exe
- Size 80.4MB
- Sample260827-llsfsaha57
- SHA256 abd8170296d13f90b491a45f39eadd96dd72723d71f514aaee6199c9988e9188
- MD5 1118efedff5c11beed4db4379179b8b3
- SHA1 3709633765ba19b44e4e0c6366709508a8b26ef2
- SHA512 235a6cd64195e158bb693c0a216569913117a0c3b8446c8f08e771cd9fd5437cfa4a1391b18f88be600f2e038d5cb3f9ad525620663b86666225990897f78d2b
- SSDEEP 1572864:2pIIWI4uHKO+dy2J0f0/rBdsG7bpip0WWinGCnkpFmHTvzBdeNxu+0HGiMf:2xZ1HI5BB7tE0WZGCnkpgzvzKNxpiM
- TLSH T10A0833245D4652E7F2894776C8F254A27FF6314A4BA7809B3AD98C436B331C5ECBC827
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
discord_rat.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
discord_rat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target discord_rat.exe
- Size 80.4MB
- SHA256 abd8170296d13f90b491a45f39eadd96dd72723d71f514aaee6199c9988e9188
- MD5 1118efedff5c11beed4db4379179b8b3
- SHA1 3709633765ba19b44e4e0c6366709508a8b26ef2
- SHA512 235a6cd64195e158bb693c0a216569913117a0c3b8446c8f08e771cd9fd5437cfa4a1391b18f88be600f2e038d5cb3f9ad525620663b86666225990897f78d2b
- SSDEEP 1572864:2pIIWI4uHKO+dy2J0f0/rBdsG7bpip0WWinGCnkpFmHTvzBdeNxu+0HGiMf:2xZ1HI5BB7tE0WZGCnkpgzvzKNxpiM
- TLSH T10A0833245D4652E7F2894776C8F254A27FF6314A4BA7809B3AD98C436B331C5ECBC827
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL
-
Adds Run key to start application