Static task
static1
Behavioral task
behavioral1
Sample
dump.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
dump.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
dump.rar
-
Size
51KB
-
MD5
ba5ff7e4cb7493760e82f2e345659405
-
SHA1
141078dc883672346f17e973ff67645cce3d28bf
-
SHA256
7d3b55984bde0443b7d8c72d6165a5ff4fee1723adcafb75e986e6dfb929eedd
-
SHA512
6affb97c620be2e2c48a51d18a2659bda089cefb53bf84ccdec8bc5e48f0fa38597e99f468a4e6da985d59ccc1ca4f7e47bd669df304623c7c764cbad33565dd
Score
10/10
Malware Config
Extracted
Family
warzonerat
C2
104.209.133.4:7500
Signatures
-
Warzone RAT Payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/dump.exe warzonerat -
Warzonerat family
Files
-
dump.rar.rar
-
dump.exe.exe windows x86