Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    65c0da07a900f065d0e646141dbb2c26

  • SHA1

    c226f0d1eb995243973948905557be2d71a968b3

  • SHA256

    7e690350c542b5ef188e025289e1c45de6af63cf76c9f2a481d1106942cbcc80

  • SHA512

    7ce50d126fb3fe3ab29c35ab67342d2f3342a6fa40b748d1f14785f5e78eee83d4791486f9c65e7495793472a8a37595ef649718097ad598c18e27857b37a8f6

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+IPIC:5Zv5PDwbjNrmAE+MIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2