Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    791b2cab4b4643d28d528193739d2cd1

  • SHA1

    8b2286ba1d43de974ce7b9ca57fc0979cdbe688b

  • SHA256

    9d985d9555743e7ca289b9193266c9d099c0e75587f6f41ff9da555cb8085f68

  • SHA512

    83b3236d9fe7472e4d869a256ab5b7a3fdce5acd860a448defac68d1d1cbe88785c5e8e4032bc12150612bea99f213c06c8b18c7b33421570e7d91743ede5953

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC

  Score

  10^/10

  discordratcredential_accessdiscoverypersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1