Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    46a8e7a2c393668ff77aecbae90c8911

  • SHA1

    f0ea3a3fd16adf942293a4e757df0e48ebe21295

  • SHA256

    fa60201746c95b3f677ca925974bc13ba960605aaca1ef760fcaef6dd1a33763

  • SHA512

    d5bdce45c388ecc5158f40bdc86aaac3baeb41f741524986bf0509440844cee41d1984992c9abbe571b4dd67fd7ff50651a7f68898b7f3c0722f68bde1b7b0c3

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+lPIC:5Zv5PDwbjNrmAE+1IC

  Score

  10^/10

  discordratpersistenceratrootkitstealercredential_accessspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2