General
- Target shipping documents.exe
- Size 763KB
- Sample201109-9masb2f5j2
- SHA256 8e2a4af633ffda92d8508e04274bad284ba57cddcdc2ee2c933a68ec6da5d4cd
- MD5 82d2906de93b7845589e9769f933da23
- SHA1 5a6acfd63d2774a9ff93e35616bb9a41aba1b2b6
- SHA512 ef5cbc6f28e7d7bf7d1de2ec96fdfc2425fb3ad114acc281c6ef0471b1a72ac7182acb28074d03a03aa42ba2e7188daf86932b3b3cc7034ef2d91cf5cb4acb84
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
shipping documents.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
shipping documents.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target shipping documents.exe
- Size 763KB
- SHA256 8e2a4af633ffda92d8508e04274bad284ba57cddcdc2ee2c933a68ec6da5d4cd
- MD5 82d2906de93b7845589e9769f933da23
- SHA1 5a6acfd63d2774a9ff93e35616bb9a41aba1b2b6
- SHA512 ef5cbc6f28e7d7bf7d1de2ec96fdfc2425fb3ad114acc281c6ef0471b1a72ac7182acb28074d03a03aa42ba2e7188daf86932b3b3cc7034ef2d91cf5cb4acb84
- MD5 SHA1 SHA512
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT Payload
-
Drops startup file