Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    4235b076fd119ff2f92bcf726a818f9b

  • SHA1

    2638f0c7eca56d7d6230df4accd76f7012fe8cee

  • SHA256

    e7baf53a006e76c7fa1474e5708c2b051ffee09c3f597451ff9f5f4dcfc7115f

  • SHA512

    21b5d280670e07b07bacd645948895fad8082605504ac43798df056a47d8f00e5198eb24a95a95ffa33690c0279674a11efb3d8e120aa481ba21f853a126d12b

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2