Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    750fdf2a326c6db022bc41d9d8902b59

  • SHA1

    072cdc8d086316129dc5228d66e4c7b401513c5f

  • SHA256

    56b13321c915aff2eab83aa707194ab42f8ff8e59bcb305a51a41ab89344b016

  • SHA512

    cded66eb7c75b262c183d6d459cd19dbb602574cddcea69107001e11a0c9258ec708710513a2a9692dc3101d59ac8cb14d1aa43bb21681ad3c3318e2666aafbb

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+EPIC:5Zv5PDwbjNrmAE+YIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerdiscovery

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2