Extracted

• • Target

    Supra‮gpj.exe

  • Size

    582KB

  • MD5

    bca697f38134aaccd4c12c627a485cd4

  • SHA1

    946ce90fe6191b15bd76d2908a50a3590778ce3f

  • SHA256

    8cc512bb06d9e61f5f6b35a5d9df7fc185bd03989213097123f2484ce56acf5d

  • SHA512

    ee44d0c84d3a377c954f9abd6d1b8047e3bebcf2da0b9f638898e76af1978c9b50cfeea11753a2e1f5358042b995527def12cff2447fafe6f4ebca1b3c554494

  • SSDEEP

    12288:9CQjgAtAHM+vetZxF5EWry8AJGy0yWphU0Km1pmylo3jwE:95ZWs+OZVEWry8AFBB0L+0E

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2