Extracted

• • Target
    SecuriteInfo.com.Trojan.InjectNET.14.15.24995
  • Size 404KB
  • SHA256 01edec8c7c26fd2565cc8a0fa1d328f9f0974b744c6c0f1318510cd483dac0b4
  • MD5 787147cc06d2ac614caf250840038ec7
  • SHA1 29b96fb5e5ea464dca33747c0119486392eb4d5c
  • SHA512 2cdb7b99299f1be982e985b8c4dc4c635f8dd563522ccc457ee54f936fb42414024f1e375cf68abdf21a3875a92d2675d0dd5ad93229f1fc208a04b258f2767e
  • MD5 SHA1 SHA512

  Score

  10^/10

  warzoneratinfostealerratspyware

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2