Analysis
- user interaction
yes - max time kernel
10s - max time network
10s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
22/09/2026, 09:39
General
- Target fortnite temp spoofer.exe
- Size 78KB
- Sample260922-lmrwmsda87
- SHA256 bae3e9b2f7128bd8b5486b4d55529782d23286c4731d678c3b69b878ead27561
Score
10/10
Malware Config
Extracted
Family
-
discordrat
Attributes
-
discord_token
MTM0NjcwNDU0NjU5NjEzMDg0Ng.G_470C.rRwMfuIYWCJlSUkMuNfBs0q86fYL-b9c5DDtmg
-
server_id
1346704644923199578
Signatures
- Family: Discord RAT
A RAT written in C# using Discord as a C2.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fortnite temp spoofer.exe"C:\Users\Admin\AppData\Local\Temp\fortnite temp spoofer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4936-0-0x000001ECD5C40000-0x000001ECD5C58000-memory.dmp
memory/4936-1-0x000001ECF0290000-0x000001ECF0452000-memory.dmp
memory/4936-2-0x000001ECF0120000-0x000001ECF0130000-memory.dmp
memory/4936-3-0x000001ECF1FC0000-0x000001ECF24E8000-memory.dmp
memory/4936-4-0x000001ECF0120000-0x000001ECF0130000-memory.dmp