Extracted

• • Target

    cutecat‮gjp.exe

  • Size

    571KB

  • MD5

    56950b73f1d8a345e5cac4a890199ad6

  • SHA1

    e06360883d38743190b0ce03eaf4ae61e50b104f

  • SHA256

    32f2cb98c31c82d74dd71ff361c1b70b8a71b75b56348ce808d2521f4aab7b81

  • SHA512

    f2c32d057c0e1ffa99d185ec4f6057f9941c8b21a51fdaf91f88f561e17ed07a74dafb1f213a066a52f79f771e1ca38ede6c663d471a325f3f900160c9f1e818

  • SSDEEP

    12288:hyveQB/fTHIGaPkKEYzURNAwbAg8awGznzgJgHYxT4Nxt7HGt:huDXTIGaPhEYzUzA0q4znzgJgHYRmGt

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2