Extracted

• • Target

    builder.exe

  • Size

    78KB

  • MD5

    5680a6247bf2ac6bd97f463863b3790c

  • SHA1

    6a18553f769b60cc23b7fe5c87f3fcc1de060d36

  • SHA256

    6fbb1c25814dd749fb423bc4f9bca99919030278a27ca09b9f997b3ef84d3c1d

  • SHA512

    9ccdd13ab4d40542c4f38c6cee4553d7179d08b7e4926170fb582a6f6303e9c2358538f2b5b936e3112943b0df394c08350cc4b35e64c93c2831a8ceec738a18

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerransomware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1behavioral2