Extracted

• • Target

    SynapseMBeta.exe

  • Size

    78KB

  • MD5

    1d3c777126c5fba217784ae40065e7c4

  • SHA1

    bcd0e895689b8462bcc03c02c158aaa78a9bc6d3

  • SHA256

    bc668cea4faae0367cee9388267e905c6eb9d963c567313fa9da0b0d3d49ee72

  • SHA512

    ffa01c74ca3393befa1b9e339e01732275637afa135ebc6654976b2055039922f3f1d1f415ed99902fbfffe5f04730146ac544e8ad9bb99c29551c65cb2e8396

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ZPIC:5Zv5PDwbjNrmAE+pIC

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2