Extracted

• • Target

    clientbuild.7z

  • Size

    22KB

  • MD5

    cf7bbfde773e2d6e05c26c4135b84466

  • SHA1

    d20c286a8f771d9f4781199d910e0ab9bc7b8986

  • SHA256

    77f09ab9846518aaba26f3b708d2efa33a14cea5a53e38b1be94e3abeafdbc8b

  • SHA512

    76cb4b2f99649ea902dead6567d0b062483d21f08d93167b06a5a3085630806f163b23a2e17e77dd5b3450d5028b8d34005e2abc86b5baf402c1c5b32ffd8e65

  • SSDEEP

    384:2xtc6gtFPSyJ7ZGR/0xpLlnsyjJ/U1U2kU5J7Ssra50/JQLN5ofiwZlMKOgbXT8y:oMrPzt80HhsyjJ/UdkUnkDiFlMKMDO

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2