Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    02cff14788ea8de0a69731bcbbb30b58

  • SHA1

    a50f9f26b527263034f01680f3eec26aa8fa4744

  • SHA256

    f578aeaeaebdccbd4fc2542fa79b858edc4728c9face7c8ef95077d038d7e9cf

  • SHA512

    62c7f7f7825fe441faf73184807157b0a5317726d66571d8e0ed56c6ac1e43ebead19e72bb27fdd74e5fb22e048d169d907695aeec671641c49a438bf281bfc7

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerransomware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1behavioral2