Extracted

• • Target

    Pharaoh executor.exe

  • Size

    78KB

  • MD5

    67704f500aeba4f18486e5a45c323270

  • SHA1

    eced935899eec5690c5c629609c7f14e6f2e7b65

  • SHA256

    98e6b9e414f6656129d0354500298099b579c6f3be734c1cb4f6ef2c5c1697e9

  • SHA512

    6b1c3fd771899c86ec1f726bb39564f97251caa01ab57177059830356d96cbdc75cd8d98660740a4778a13d11493172468b0632401aa77a7482205acc89e0bfc

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+ePIC:5Zv5PDwbjNrmAE+aIC

  Score

  10^/10

  discordratpersistenceratrootkitspywarestealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1