Extracted

• • Target

    1324648543721361449-1324648543402725396-Imagen-loro_1

  • Size

    709KB

  • MD5

    9141efe15618fa406c09c030e5595f9e

  • SHA1

    9cef69b36e557260b20298f48d11148cc9b83230

  • SHA256

    c41c0a3aff41ec17de75cd8f31f268f5063693743eb4639c907042574b3724ca

  • SHA512

    4a23ca9a5d35b289d9b3db7433ed9d7345ab4154e49f5bb8a0df995f28fa3ac75d25114c2ee0ba6352d80b779c9e0e50b2644e31f801a71ec8075fdb32e668ef

  • SSDEEP

    12288:zyveQB/fTHIGaPkKEYzURNAwbAgXJEOcCqcko1q+tKMm1CMyo:zuDXTIGaPhEYzUzA0jyFo1e1gbo

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2