General
- Target https://gofile.io/d/2WZYKps3
- Sample260904-wembashb26
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://gofile.io/d/2WZYKps3
Resource
win10ltsc2021-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://gofile.io/d/2WZYKps3
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTU0NTQ4MDMxNTM2MjA4MjgzNg.GVq64W.w90KoZD7o9LG-ynKfc3iL611yMA5kHJremSjTU
-
server_id
1545479681866858576
Targets
-
- Target https://gofile.io/d/2WZYKps3
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.