General
- Target PI#222145.exe
- Size 1.0MB
- Sample201109-szfcnaexnn
- SHA256 b5b64f85cdeb5432018e22087fce4b6dc1e56593e8416335f471d4eac1e2b8cf
- MD5 2a02001df87e30cca1c88125646dbe4e
- SHA1 fc74a24986ab1480b8b2e6328c56a6444bde86da
- SHA512 2cb4ded84d96655f8946c5baf8e2931d84cdf605dfada75336034e0d26da7ad6d3eced16b8e6a245ded445c4066e1643fa4a842e8ef20e3efec90703826f00ba
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
PI#222145.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PI#222145.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target PI#222145.exe
- Size 1.0MB
- SHA256 b5b64f85cdeb5432018e22087fce4b6dc1e56593e8416335f471d4eac1e2b8cf
- MD5 2a02001df87e30cca1c88125646dbe4e
- SHA1 fc74a24986ab1480b8b2e6328c56a6444bde86da
- SHA512 2cb4ded84d96655f8946c5baf8e2931d84cdf605dfada75336034e0d26da7ad6d3eced16b8e6a245ded445c4066e1643fa4a842e8ef20e3efec90703826f00ba
- MD5 SHA1 SHA512
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT Payload
-
Drops startup file