Extracted

• • Target

    bootstrapper.exe

  • Size

    78KB

  • MD5

    bbcd1358829e3f227e2994cee4104a07

  • SHA1

    ea5e32e8b9b2af737009cb6f80b6729b748fdfab

  • SHA256

    92fce7a02eb2bcaa35ea632e9eb8534f44b0eb2839e94b7f80c91251fff5d251

  • SHA512

    66af0ec9ba3d641ed50dd283fa61d5186824504d0779a6036300f4ecc24a6afc7e8143b1afd777d467b367cebe3258aab889cd317eba7cd21e5145ef5d90895c

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+1PIC:5Zv5PDwbjNrmAE+lIC

  Score

  10^/10

  discordratdiscoverypersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1