Extracted

• • Target

    Loader.exe

  • Size

    92KB

  • MD5

    1301b9ea64d8390d9970ca0525b10154

  • SHA1

    0c06706061f6457871f5e88aff1a12cfcc2960be

  • SHA256

    0f070514a21f205c7d933c888e2adfd9b9a88ee974bc5df6542e2e281c2876f1

  • SHA512

    b83033cb2195f38105cf16fa8ff6967415b68fd01b5925e71ad43e5b1b72815f164f8e9c82e52d1bb727073e61c2d3b46cd4969dd893835f5cde6883ed31cf57

  • SSDEEP

    1536:SbPuJtGN8F+9okEPBAqcBPDyc5I0bpAkAfLgbGNrb9xCIpOMeG73:UuJkN8FwokzBBPDyc5RQgbGNrUGD

  Score

  10^/10

  discordratdefense_evasionpersistenceransomwareratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Indicator Removal: File Deletion

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1