Extracted

• • Target

    toystorylogo-4k.exe

  • Size

    524KB

  • MD5

    34ae0745931735f6af04adce8c1358d4

  • SHA1

    825aabac462d7cdf80cd864a37e52175b2b78c0c

  • SHA256

    4c56e50351c382dc82173c238228540ee12ecd399a8aab16d9bc49bfa4031e12

  • SHA512

    5dc2f74cd7baad445650c57332a4c46462323635b40360915bc07dabfa69d9a4419528c4e4fd73efae59e68aa9220083ce5cbbcaa06c742eafc47f7350acdc43

  • SSDEEP

    12288:3yveQB/fTHIGaPkKEYzURNAwbAg8j03rxuLrW:3uDXTIGaPhEYzUzA0qI3NuLrW

  Score

  10^/10

  discordratpersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1