Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    8e1f097cac8309eccb4f81da4c367418

  • SHA1

    9875c8339ddf3c36e15e484b2b75d50c7ef4e65c

  • SHA256

    6e0ccf85a77e2ed432dd35683bc7e9db6b5800cba93a62f04d4dfea4a3c76f21

  • SHA512

    ba426cac8ae7768d3911d16eb8b4184791b0c5fa3ab19f296652279ca22189667b2f07940fa0a6f4a3c1eccfdf5ab8f51e04351441a0cbbd86da6783cf07a83c

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rjPIC:5Zv5PDwbjNrmAE+r7IC

  Score

  10^/10

  discordratpersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1