Extracted

• • Target

    executor.exe

  • Size

    78KB

  • MD5

    10b2da716481ed70b391ae0f97d0e64e

  • SHA1

    22ccb5a19045d2db496ad0c5c0326e620e6e620f

  • SHA256

    63e676624115c3fd9febe7649f8c65dd65cb20df39595cbcc96b3781d1dee83c

  • SHA512

    f5dee05290a9a66975495c061fba0b9e567fe57ddff626b517388d246cacb825f92f0e6670a7f064307d478b49ceaf0f7d9f18bd8c615ca53b7fadb362d33b8c

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+vPIC:5Zv5PDwbjNrmAE+XIC

  Score

  10^/10

  discordratdefense_evasionpersistenceprivilege_escalationratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Abuse Elevation Control Mechanism: Bypass User Account Control

    UAC Bypass Attempt via SilentCleanup Task.

    defense_evasionprivilege_escalation

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1