Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    4df04cff530018542d06b2c4d4fc1df2

  • SHA1

    6022231e4020da6204c73884b334bf3c6a9f191a

  • SHA256

    7887c12ad9d967cdaeb7aa252dbf92fee4ef65464fc839cf6d81e425d04843de

  • SHA512

    fa584682fb31608eee5755687359cb8fc4011d7493d0bfe70623944476bccb31abf575c18fff3a2172f04921d7512399b2d01887967af283e852d5603b70fb83

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+TPIC:5Zv5PDwbjNrmAE+LIC

  Score

  10^/10

  discordratpersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1