Extracted

• • Target

    medal.bin

  • Size

    78KB

  • MD5

    1802b92294b1e34a8e3b0b946b50e1e6

  • SHA1

    a00cf57993839ff66a19cbd62ffb915e000ed79f

  • SHA256

    99a17cb34f4d696761cf6eff255a0c53751ec291211be94636d8b43bd1285951

  • SHA512

    72f01f14a25aea2bcbb64b95088bd6f750082fa8ceb79b96c3be937a27f9194b02a4f3dbd4420635d0bf978c1cb01b0a13b11c2e6fb295da2ca85f113304e19e

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+MPIC:5Zv5PDwbjNrmAE+gIC

  Score

  10^/10

  discordratdefense_evasiondiscoverypersistenceransomwareratrootkitstealer

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat

  • Discordrat family

    discordrat

  • Disables Task Manager via registry modification

    defense_evasion

  • Legitimate hosting services abused for malware hosting/C2

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1