Extracted

• • Target

    echo-5A7E85-dWEyYXBi-wZdZlN-f.exe

  • Size

    109KB

  • MD5

    8ff7691ce984d8240d93140470ee90da

  • SHA1

    e3f1ae792adab6026152b2a1733d42f91eb8b4b0

  • SHA256

    c3f50c1a06d78569baaffb4c0078e145541b76179aece4283936f209291208fd

  • SHA512

    8ab51ffc0fd628718f757ae5efba9cd781a17310350d2f4098b2785371714dffa5a398683c41e0376dd6256a5de4cf91c24e0f78af9d830e715178c877a5dbf3

  • SSDEEP

    3072:EbRltj4wkI6yNKv0YhNq/BVPsbwNrDZWsH:Ent239qpdsb+r

  Score

  10^/10

  discordratpersistenceratrootkitstealerransomware

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1behavioral2