Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    0f8802133a842494287129e43a31748c

  • SHA1

    977d409ebece79549366a2fe5b3e37faa55f06d8

  • SHA256

    fef53fda9cbd9310aaba86d8fedc2c17c9ed439f23c2082651589bea2c1ac119

  • SHA512

    028601683284ac93edda0f18b8f9d78e46e7f893dfc4718dffb68d5cfea8fd08100c7d50b26ec3d1858ff9f8a422e88264a88c27bee0dfa1bf169eca3de6e7e5

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+sPIC:5Zv5PDwbjNrmAE+AIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Drops file in System32 directory

  behavioral1