Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    a335f7430f76494c6cd48e075d9234fb

  • SHA1

    5ae9f1dc16728465a806e697d33d2b786724e2e8

  • SHA256

    66e66e7cfc1fdbd78fe93b94868793bf6b39385f729b30ee8222d9a10e2b4953

  • SHA512

    dfb29f07f1dc1da41a358ba5e64f05c6c0ea88d76163464a7728b20f3ac2d857fde800354e6ca4faa4ff0943715b7ecc9b0899589bd3db247682d9a05ae86668

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+LPIC:5Zv5PDwbjNrmAE+jIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerdiscoveryspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2