discordrat | 3a47516a9aa240ff0699be768a97cdbd5c6a6a2ae0914c4da05e96fa509d19b6 | Triage

Submit
Reports

Overview

overview

Static

static

RadScript-LTM.exe

windows7-x64

RadScript-LTM.exe

windows10-2004-x64

Sharing

General

Target

RadScript-LTM.exe
Size

78KB
Sample

240704-zxb5tsyepp
MD5

ed3336cb4bf8338766b3837b8ef15c60
SHA1

2aa00d65d40296d8e528dc2e4a2b70ffe4fa0bc0
SHA256

3a47516a9aa240ff0699be768a97cdbd5c6a6a2ae0914c4da05e96fa509d19b6
SHA512

733c9d092d295d0b1b3356feda27ea7241571236221c3a5b586a21ba87e10a0026cb7cb1feadafdb17930789917e98815f754145f565416b8167fea5852b3091
SSDEEP

1536:wIQOI8S4zTMHFEOEGZefHeKrIX8amErwbjNrB+uexCroKV6+fd6:wIq8S4nMLeGKrIX8amcwbjNrB+xSd6

Score

10^/10

discordrat persistence rat rootkit stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

RadScript-LTM.exe

Resource

win7-20240221-en

discordrat persistence rat rootkit stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

RadScript-LTM.exe

Resource

win10v2004-20240704-en

discordrat persistence rat rootkit stealer

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

discordrat

Attributes

discord_token
MTI0ODA5NTUwMzU2MDczNjgyOQ.GDa56t.9JQ8X9M_IhzNN2OonxifeOaAfNRq8mv0dYTIRc
server_id
1221950436458893433

Targets

- Target
  
  RadScript-LTM.exe
- Size
  
  78KB
- MD5
  
  ed3336cb4bf8338766b3837b8ef15c60
- SHA1
  
  2aa00d65d40296d8e528dc2e4a2b70ffe4fa0bc0
- SHA256
  
  3a47516a9aa240ff0699be768a97cdbd5c6a6a2ae0914c4da05e96fa509d19b6
- SHA512
  
  733c9d092d295d0b1b3356feda27ea7241571236221c3a5b586a21ba87e10a0026cb7cb1feadafdb17930789917e98815f754145f565416b8167fea5852b3091
- SSDEEP
  
  1536:wIQOI8S4zTMHFEOEGZefHeKrIX8amErwbjNrB+uexCroKV6+fd6:wIq8S4nMLeGKrIX8amcwbjNrB+xSd6
Score

10^/10

discordrat persistence rat rootkit stealer
- Discord RAT
  A RAT written in C# using Discord as a C2.
  stealer rootkit rat persistence discordrat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discordratpersistenceratrootkitstealer

behavioral2

discordratpersistenceratrootkitstealer

© 2018-2024

Terms | Privacy