Extracted

• • Target

    rizz.exe

  • Size

    78KB

  • MD5

    6ed2528aa8fff43587739f7b2638ee92

  • SHA1

    4148b092d718188de7b4ed127ff64cd7f0be63bf

  • SHA256

    5df303a1df4baca2c539771c6d55058c8ff3ef2a790f696d470edfeb06cde1dc

  • SHA512

    bd5022345d34f1cfd2c55be07b19502b657376f3bd4b98dcf69a02b9cd67f38448b7d69bf2f4c95a3d1f5ebcaa603b7b3d3ca2fc9080b0784726667e5bfdf967

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+xPIC:5Zv5PDwbjNrmAE+hIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1