Extracted

• • Target

    AutoUpdater.exe

  • Size

    78KB

  • MD5

    4ef3988d23c0e3cb6c4a5948c7865ce3

  • SHA1

    77a0b7cb980982bddd1bbf920c4acd918b417d7a

  • SHA256

    9297e053593230a1ffe610b08cc5a15e2bb09b7fe597943c999619ae998afbd8

  • SHA512

    d7dd7f6752beac6913158765fa24536f6563562250493e0e1db7b465524d29a80fe907dbc4524e47f261a18c5db45dff4844f5ec0496e0daf0c7a5a57869e0ed

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+wPIC:5Zv5PDwbjNrmAE+0IC

  Score

  10^/10

  discordratpersistenceratrootkitstealerdiscovery

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Drops file in System32 directory

  behavioral1behavioral2