Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    aab9f738c675f2bba68db6c2085aad30

  • SHA1

    37d6def47d70181bec103c4b1563158f09090e58

  • SHA256

    17d34ee722163635b755aa6148f9f6ea2518b16e7b16b0d64b3ee80d346977e2

  • SHA512

    4a188091fe6915a0e800c2c054f4787ae0eeb1ef3d319dd25b6ad8f01524b9dfd028da9ea90bc2bec50b58b64c7a618c2aa1c48d4509988ead41162fb26e6c00

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+XPIC:5Zv5PDwbjNrmAE+fIC

  Score

  10^/10

  discordratpersistenceransomwareratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1