Extracted

• • Target

    life.json

  • Size

    94KB

  • MD5

    a6f113bbb73c55383df5665765897ac2

  • SHA1

    1e135744ad28618490e9d14dd64051083e448af7

  • SHA256

    1cc2614bca2ba956a8769885626ea266e2c801fc9d6406eb92c2d4d823e4f64a

  • SHA512

    b66e26fc1a89dc5b712e55704360aa91e7b20e8d24406cff444342198c0c4b0bbad627dec1b9317255644c87bbab565fb06e5f0f744384e57b12307bed02328d

  • SSDEEP

    192:Sfp/bBWBoV1QUa+SUBhSffS53RnmxSbnsDQLqPnxsXqQmq/d9Xs1oGu:MTBW2VxSUBhSC539mUbnsDQLqPxGH//T

  Score

  10^/10

  discordratdiscoverypersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1