Overview

overview

10

Static

static

3

2026-11-05...ch.exe

windows10-2004-x64

10

2026-11-05...ch.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-11-05_8b2ee592e90fdb44b9daecf6567ac33f_frostygoop_hive_luca-stealer_salatstealer_sliver_snatch
  • Size 1.7MB
  • Sample261106-vgxpdacz4t
  • SHA256 18019d905f18cef03f6d87497049d30a3a76bfcb4f12815b4ef032eae751a4fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discordratdiscoveryexecutionpersistenceratrootkitstealer

Malware Config

Extracted

Family

  • discordrat

Attributes
  • discord_token

    MTU2NjEwNjU0MjI1NDcxOTA0Ng.GdFThD.zOtZqoFl45lEKll0Qw6yULAQ9QzXbFGn2Sedak

  • server_id

    1566090571276361758

Targets

    • Target
      2026-11-05_8b2ee592e90fdb44b9daecf6567ac33f_frostygoop_hive_luca-stealer_salatstealer_sliver_snatch
    • Size 1.7MB
    • SHA256 18019d905f18cef03f6d87497049d30a3a76bfcb4f12815b4ef032eae751a4fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutiondiscordratpersistenceratrootkitstealer

    • Family: Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat
    • Custom signature

      Detects executables containing URLs to raw contents of a Github gist

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks