4302db9a_extracted

General
Target

4302db9a_extracted

Size

108KB

Sample

210216-kak53ef67x

Score
10 /10
MD5

6b668125529079c58cfe5fd6722df803

SHA1

0b47072a4092c5b00095b18b0a40a4bc4785912d

SHA256

0982c148039738079fbf837c714b7be5aba99abe3193ce57a2668f1264865b41

SHA512

4aa56bda9b9d99ea1f0e21f85d4af602c54e3221a05b31a9be91e70a11cfb9b8583e55947f722c2095c43d400cccb9bc6beea6de439adedec31039ffda292bd6

Malware Config

Extracted

Family warzonerat
C2

168.61.222.215:5400

Targets
Target

4302db9a_extracted

MD5

6b668125529079c58cfe5fd6722df803

Filesize

108KB

Score
10 /10
SHA1

0b47072a4092c5b00095b18b0a40a4bc4785912d

SHA256

0982c148039738079fbf837c714b7be5aba99abe3193ce57a2668f1264865b41

SHA512

4aa56bda9b9d99ea1f0e21f85d4af602c54e3221a05b31a9be91e70a11cfb9b8583e55947f722c2095c43d400cccb9bc6beea6de439adedec31039ffda292bd6

Tags

Signatures

  • WarzoneRat, AveMaria

    Description

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          10/10

                          behavioral1

                          10/10

                          behavioral2

                          10/10