Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    2e9b01395d9003c387488b3c40997af6

  • SHA1

    bd92df65650a9d026f2f285d2a3e1c6207bb7841

  • SHA256

    fcc8a339b67be5048d0cd6d6c96a501dc828295cb42a7a7dedcd5ecc46af3aa8

  • SHA512

    c61d57ffed70e3f9645d365222bd44bcb0f711e842f9eb5ec9a75e0b6db246baaa88b3fc474a078c5bc326ad07966371dbd0707e598ba2ac4959b8a36713872b

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+czPIC:5Zv5PDwbjNrmAE+crIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2