Extracted

• • Target

    SkiSploit.exe

  • Size

    83KB

  • MD5

    ac4170123a3b2656873d4e5e7271c6f0

  • SHA1

    e5ab91b0ff264b4fbc5e8bca9d8edb143c589a6c

  • SHA256

    93cbb28afad0068220ba3db611d549f10cf98dfdd6c50fb552fc1a1c50a952c5

  • SHA512

    76042342dfa27a31e233e7a28baa935d2e5ab3434afc297c3597b04edebb154a2558b7a01b884f7ff91f2aae435cc96491b307390cce3264a31253ab22bed269

  • SSDEEP

    1536:t5Qsei1MzG2sMCJFjH24DIR20VJnXeL4+1pQGtbzziA1o5bd/Js4r9n:t5x51MzG5FjW4whnnXeL4+1pv3zHoHB3

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1