Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    c2cd7f1f0786166d5ad2830032ed2dd2

  • SHA1

    eefad3ed5c81e3a23394618e4fbeb8dc017f16b8

  • SHA256

    1848b1b34ce4d5836a96d917c367ab8bb37521564a4a66941cc304df46b873d0

  • SHA512

    d7a7a112d73b4de608e096e9d17045e45fb0a7ea5247bed311697d274fa9387a38b6eb52e7e8a205355f61810053109879bc64a8421a89307371a77b527e5bed

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+XPIC:5Zv5PDwbjNrmAE+fIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2