Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    68bf7623de23b9e6f681e12a67638272

  • SHA1

    e9bc5c4db1f6e6381170d1424d4d16d45154b5f1

  • SHA256

    1daf9f6c2cb45a50a0589972c4e3016689b27ef83590621501596b1c92147c57

  • SHA512

    c6c8cde39b2c31f38323d21874023787922ee5f89b158ed59961a2ba8b7344cb424084a0d2cfbc85c48d41448863539995d56aae0aefab4fb361c0ffe17ca0cc

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+HPIC:5Zv5PDwbjNrmAE+vIC

  Score

  10^/10

  discordratpersistenceransomwareratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1behavioral2