Extracted

• • Target

    prewiew‮gnp.scr

  • Size

    531KB

  • MD5

    e42e304f2d03c647a200a913f22357f2

  • SHA1

    66f4df4861a33d2dc0824c5085200cba3c6808d0

  • SHA256

    b7795416b4dbda541281cf9c369a1bd692e53ed3abf5f9f10ca40b551a8d71e8

  • SHA512

    00fddae7c5839cef910f93192ecb0491887fd48e1759438715461854877a6ada3080a2fc1b4fa71dfbd951fbb72e7f75ea2a863ba7fc534257880d9824fba250

  • SSDEEP

    12288:OzxzTDWikLSb4NS7QZ4nQs1Fys/X3gptwaLbDw:oDWHSb4NgnQ6vgjHDw

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1