Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    9594ac941ec9890ab23e5bedf012ed7e

  • SHA1

    8ed5b64424b987078d66386ab846b1310800a70c

  • SHA256

    b443a47b136605e52aac37efa2c044a2d36e6a170b9e23d45e9abcaf0d6981a4

  • SHA512

    3ccc8442828252eda27f681df25aecdd216bedf7b254c3f6e86f12c2633542d34ec0b15e086ce018db69f536a14c980ddf62811e9886e3b127838ff7a0e7474e

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+EPIC:5Zv5PDwbjNrmAE+YIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2