Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    c1f71798dffa8e4a4ab805c27a789ea8

  • SHA1

    8c2f701fd09b8a7cd7765250ac5c6076ad0b1250

  • SHA256

    152c8a1df21658fb6b56fe83980ad12ae4b09aba7dbe79f81fadf6cfcb053ef3

  • SHA512

    77744fb33cb7367aa2f1693cb4808e0c4dc9fdd87f14b2f5ff249715f23d2e21b5e16d016eb23a51e8325c343432a4ff2796f34008fec64e891de3509bf1722e

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+WPIC:5Zv5PDwbjNrmAE+SIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2