Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    70cdc00ff2242c320ffdc3d5c7f7ede8

  • SHA1

    4b755fd310680c8a591903152525593147ebf37d

  • SHA256

    3e9bd0926ffb13b3a2cabc9d4c8dad71e52a03156dcd7f6a9595ad70ecdab83d

  • SHA512

    fb04ff59a59452bb46a2656851085efd38c51502cc5c19cf3be7635979a780fd2c6cfbebcd6945fc3244b51a461aa733075a47d50895f0a9e4d42813a7df6b49

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC

  Score

  10^/10

  discordratevasionpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Disables Task Manager via registry modification

    evasion

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1