Extracted

• • Target

    TEST.exe

  • Size

    78KB

  • MD5

    d342164488b5574da639e404c0756831

  • SHA1

    1896ec0095610935993935b1fa14678d729e3d12

  • SHA256

    0a5829c5c2d1ffb068abcffc0a6f808438a52cbb7e974445d08770428b96c7b7

  • SHA512

    0b9b76906bf6ec4e2868d3412df69ee77bef132ff2396c2cf802c44e909c53635bfccdfd23fae3b55560f4e83edacec529311f94901e6c23654e4f8bb8e62590

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+yPIC:5Zv5PDwbjNrmAE++IC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2