Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    d5cbf90eddc9215abfbf3ff955c35798

  • SHA1

    959858304f4ce75e10f4a1ba7df814146b585c50

  • SHA256

    969dff2acdf0d2cc713929f46629150e821de3c2dbdd3add229a5843e7b09703

  • SHA512

    c96c59656195ac5fe276467bdf4c9e509c6284caa73b0e05b583f84dc0f6d03c84df3bc95267162173c3c42181e209c91d49ed7affe03418021e37d7aab3df6b

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+FPIC:5Zv5PDwbjNrmAE+VIC

  Score

  10^/10

  discordratpersistenceransomwareratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1