Extracted

• • Target

    HEUR-Exploit.MSIL.UAC.gen-03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e

  • Size

    78KB

  • MD5

    d40ef0184cd8a7428374f5b9daf94ba6

  • SHA1

    85bd38a2b5a858c6b5e0608b73f66874c4aa9c63

  • SHA256

    03ac9a5d049067f3b13e2781e336178aa01fab5cb8e7effc5903da08aabcb61e

  • SHA512

    37c4fff56bdec5dd7296d6f0dca05c7c66f73f111fd8da47732c5b82bd6faaacb20086eefa319cbbd1d0e10119644444002db3a57ce0f76d7da12eb4857c4e33

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rPIC:5Zv5PDwbjNrmAE+DIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Detects executables containing URLs to raw contents of a Github gist

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2