Extracted

• • Target

    CLEW enquiry 2021.PDF.exe

  • Size

    471KB

  • MD5

    54354bddb2f478a548edda9ff940f0d1

  • SHA1

    539d0510ce7e27cbf18e30952f6ae151cea8eb1e

  • SHA256

    6d72e21f8eed71f706041b12c6efaa66fd12ad213a48415f682a19b0f3e46f17

  • SHA512

    788866f1da8e8fcacefd58be1b144d23cdb69c0132648edf7a79f394d4eb7fe405deeab829be583674943ba2f2c3795da6aeabd6d4dbbf3d6233c04b590ce8dc

  Score

  10^/10

  warzoneratinfostealerratspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2