Extracted

• • Target

    monoware.exe

  • Size

    78KB

  • MD5

    8da8b05938831e8e547b60526236ece7

  • SHA1

    c27806eed416f8676548d89aa0207d028f800234

  • SHA256

    aed0081d6aa8fa3b29d155c6bb45e9278b4562102f8d4497a51db56871a74134

  • SHA512

    552e09c36ec48d3117209546e70b1322b929d3f5c59f49af4e66f51c5123230bec766a7315de022027afc0d41920fa7f86f42d82e4f000ac73bab08136221ec6

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+MPIC:5Zv5PDwbjNrmAE+gIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2