Extracted

• • Target

    backdoor.exe

  • Size

    78KB

  • MD5

    fd20fe5621aa91f1ebac577a4b873694

  • SHA1

    e21b19d3b71dafd57c64042553436d543852ed12

  • SHA256

    bd106b91048fc739e255f76dbd42f6c39a4ce22a1db5567adef95278b84b975f

  • SHA512

    c769fb3f55d937c9f536c3c201fd3158a4493ab70d03d659385f2537b779b3a1f18bff9be861157c1c1468fbec435d30608330327387eb7f674e26e8059cb8c3

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+FPIC:5Zv5PDwbjNrmAE+VIC

  Score

  10^/10

  discordratdiscoverypersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2