Extracted

• • Target

    Client-built.exe

  • Size

    78KB

  • MD5

    2521a795346249cba9a1948e36b37ad5

  • SHA1

    5df2fc9e11e35ceb92a57835e30a25859ea37c15

  • SHA256

    21c42757554ed19066c0c6e2f8f06ce0e687bf898ad1dc1f75cd601fc957cb1a

  • SHA512

    c883e2cbad5701b25d3ddcbc1cffaa87113931c400e5379b7c683548eb3b89f3da999fdd3d61015f3161a6f75b3bcccc9054c55b980daeebf2a18534808a27f7

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+FPIC:5Zv5PDwbjNrmAE+VIC

  Score

  10^/10

  discordratpersistenceratrootkitstealerspyware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2