Extracted

• • Target

    Nitropics.exe

  • Size

    429KB

  • MD5

    e84293d6a10f5ae75563a71eaab55220

  • SHA1

    5eb3a94e9f0d3a441daa5a1dd970a2ed1c0ff535

  • SHA256

    0765a9b300832e96e9d4ddf0eb1fa784a05452e2a13d25d40d09533fc96f29d0

  • SHA512

    4df885736d7af5c4d052a94d52db94fd5e08d21b8f7936159434ea401711f39f7a3ce07a6fcf7c9d80f612dc2a1b140d526f31efa74f55a435217a8ab56963b1

  • SSDEEP

    6144:zE+yclwQKjdn+WPtYVJIoBfYzNMrS0lCtXDjkieP/JX8:zBdlwHRn+WlYV+5zOrS0ct8X/JM

  Score

  10^/10

  discordratdiscoverypersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2