General
- Target e6259f36_extracted
- Size 108KB
- Sample210216-lh4ln84a5s
- SHA256 5fbfaab4910754b7372e12ad09c1d3d18759bf1badd6710fa3cea08aa3abe302
- MD5 e197332d64013cee8f527f0785b0f088
- SHA1 7b8db8824ab5e8da0aa9ee2785b019b646d6dbaa
- SHA512 b0f3725f476e2d29ded2afaf2a056eee0dc3cd0b676f41d48236fcae9cb0b3f93aa56d2fe72ba9a06d6ff9887e9a0d2dceb0a2927576a5c17ebbce7ed1c81444
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
e6259f36_extracted.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
e6259f36_extracted.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
warzonerat
C2
-
168.61.222.215:5400
Targets
-
- Target e6259f36_extracted
- Size 108KB
- SHA256 5fbfaab4910754b7372e12ad09c1d3d18759bf1badd6710fa3cea08aa3abe302
- MD5 e197332d64013cee8f527f0785b0f088
- SHA1 7b8db8824ab5e8da0aa9ee2785b019b646d6dbaa
- SHA512 b0f3725f476e2d29ded2afaf2a056eee0dc3cd0b676f41d48236fcae9cb0b3f93aa56d2fe72ba9a06d6ff9887e9a0d2dceb0a2927576a5c17ebbce7ed1c81444
- MD5 SHA1 SHA512
Score10/10WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.