Overview

overview

10

Static

static

10

930cf1dd_e...ed.exe

windows7_x64

10

930cf1dd_e...ed.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    930cf1dd_extracted

  • Size

    101KB

  • Sample

    210304-bnmdngb7dx

  • MD5

    be8047fa3e13b17852b8750a051726f1

  • SHA1

    687e1165f8657f94ffd01d299f4c491fea56aac2

  • SHA256

    6e9730c5ccc9b7ff072f63d7d246906681df04223af0397e2fd1dfd1dab3f925

  • SHA512

    ef9d69cbe3e96dfb0ef6daf29b36b33d2263b7c779ae043d77a335229ab98e50883517e676dc9b91a965430f724686605fcbb334c596e5bcfb48637e40725c29

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

mit.warzonedns.com:1380

Targets

    • Target

      930cf1dd_extracted

    • Size

      101KB

    • MD5

      be8047fa3e13b17852b8750a051726f1

    • SHA1

      687e1165f8657f94ffd01d299f4c491fea56aac2

    • SHA256

      6e9730c5ccc9b7ff072f63d7d246906681df04223af0397e2fd1dfd1dab3f925

    • SHA512

      ef9d69cbe3e96dfb0ef6daf29b36b33d2263b7c779ae043d77a335229ab98e50883517e676dc9b91a965430f724686605fcbb334c596e5bcfb48637e40725c29

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks