General
-
Target
32bd7813_extracted
-
Size
98KB
-
Sample
210304-vm788rpnca
-
MD5
edc76f55dd524dff091b416acd0f705d
-
SHA1
a668f20f713726cb206a262e6aa4f8d92ea9538a
-
SHA256
e8323188b09701fb4b00e3df10a2dc641cc02b37ddd66466fb69fe05e70550f0
-
SHA512
a7891b60a92ca1ebe15e8fcc35da9524a3dae17eef89fdb781b9e91038b818d620fba65ca35ad9b1569c3149e981f393b8d9c175ffddd57242eb4246b9b8a75c
Static task
static1
Behavioral task
behavioral1
Sample
32bd7813_extracted.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
32bd7813_extracted.exe
Resource
win10v20201028
Malware Config
Extracted
warzonerat
eccoclean.hopto.org:7878
Targets
-
-
Target
32bd7813_extracted
-
Size
98KB
-
MD5
edc76f55dd524dff091b416acd0f705d
-
SHA1
a668f20f713726cb206a262e6aa4f8d92ea9538a
-
SHA256
e8323188b09701fb4b00e3df10a2dc641cc02b37ddd66466fb69fe05e70550f0
-
SHA512
a7891b60a92ca1ebe15e8fcc35da9524a3dae17eef89fdb781b9e91038b818d620fba65ca35ad9b1569c3149e981f393b8d9c175ffddd57242eb4246b9b8a75c
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-