Extracted

• • Target

    hi.exe

  • Size

    78KB

  • MD5

    40ad387a93b7cd81f0f79be861ab93d9

  • SHA1

    4102508d22f1aaa136f881a063ddce8e1e1fac51

  • SHA256

    9f60b978b4e60a70cbc1037acb55ff4f6d61765b30ac2e12cf9cf8b2c51f8347

  • SHA512

    23b1d218b42f973e4adc1b7d9c26df80da86ad38ed0c64d2dd9a5d89c854a947abd506eeeb89778fcd97d4b3f503996fc0f4d06d3def33717ac586d3fbfcfb91

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC

  Score

  10^/10

  discordratdiscoverypersistenceratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1