Extracted

• • Target

    Client-built (1).exe

  • Size

    78KB

  • MD5

    16f49b6c21e3d85f25ac5851a7e0d2d2

  • SHA1

    9d6e4b44d9750687c230addc73f64c1d3f81d74e

  • SHA256

    d76612e7f69d513d83757b0478c29057120de47e29d720a3432f373c74b99cb0

  • SHA512

    b06b206bd622bcb9f10f12559c2a2aa6df2b67fc88d8d85f71aaa7e998e484717a269479cd9bc89003aaeaf9c2021c7b08d08f66c1a0f3085a0f28e16fb04f34

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+aPIC:5Zv5PDwbjNrmAE+GIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2