Overview

overview

10

Static

static

10

0567fc59_e...ed.exe

windows7_x64

10

0567fc59_e...ed.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0567fc59_extracted
  • Size 108KB
  • Sample210216-5zycf1x33a
  • SHA256 6160f8f9162640d744f4f2bd5286134b22ed225690250fdda89bbb2384dd1be3
  • MD5 SHA1 SHA512
Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

  • warzonerat

C2

  • 137.117.59.51:5200

Targets

    • Target
      0567fc59_extracted
    • Size 108KB
    • SHA256 6160f8f9162640d744f4f2bd5286134b22ed225690250fdda89bbb2384dd1be3
    • MD5 SHA1 SHA512
    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks