Extracted

• • Target

    nyxo_aimlock.exe

  • Size

    78KB

  • MD5

    3e7ddc5f7fad580b7d36bd80714c343d

  • SHA1

    f2943c1c5024da64c5e077e5a2c4139f661f3cce

  • SHA256

    35afb2b65e7371130bd99515da2b695a009821c60d1006ea6bde3ee9532f842b

  • SHA512

    e7e706ae8d1e892a5e2b542e23419c9c030fa654c06a8e955ea64a5fad0c5e1fa094332a36f24d978e02d812e428d2b91e97fe6f8a26a80f67dffbc5b1c360c0

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2