0567fc59_extracted

General
Target

0567fc59_extracted

Size

108KB

Sample

210216-5zycf1x33a

Score
10 /10
MD5

95a9484a34ab54c2f10b1285377a1354

SHA1

e3c9433f40c97a6f8cd40f0fa19db0bf9a7133f3

SHA256

6160f8f9162640d744f4f2bd5286134b22ed225690250fdda89bbb2384dd1be3

SHA512

be7fc117ecf683cc314b1680a72b77700bf37faf3351e8ecba50a3035fd1bd28205b745d76cf2ae777ec43e61912296097d806c2ab0543576aa3965a7d3ab96a

Malware Config

Extracted

Family warzonerat
C2

137.117.59.51:5200

Targets
Target

0567fc59_extracted

MD5

95a9484a34ab54c2f10b1285377a1354

Filesize

108KB

Score
10 /10
SHA1

e3c9433f40c97a6f8cd40f0fa19db0bf9a7133f3

SHA256

6160f8f9162640d744f4f2bd5286134b22ed225690250fdda89bbb2384dd1be3

SHA512

be7fc117ecf683cc314b1680a72b77700bf37faf3351e8ecba50a3035fd1bd28205b745d76cf2ae777ec43e61912296097d806c2ab0543576aa3965a7d3ab96a

Tags

Signatures

  • WarzoneRat, AveMaria

    Description

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          10/10

                          behavioral1

                          10/10

                          behavioral2

                          10/10