Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    3adc956e3228a6d69cbc82cdf015ea9b

  • SHA1

    58d5b8f8ea0657797a750c8d076d9daee72b52b6

  • SHA256

    1a91ad0e6655d6edbc971f6d00e59c7073dbdf9c6ce2182d2b5a165e251cdc6a

  • SHA512

    ac1701e2399ca30a1bae33019b53a7088599b788ef3e283571ceaf92eb5caf5781135a7c0ecc63753ceba04634732c092c654b7e2467faf6eeddf85bbffb4d70

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+JPIC:5Zv5PDwbjNrmAE+5IC

  Score

  10^/10

  discordratpersistenceransomwareratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1