Extracted

• • Target

    D0D1601B11D5CC352CF779EDD08D0CAD.exe

  • Size

    98KB

  • MD5

    d0d1601b11d5cc352cf779edd08d0cad

  • SHA1

    29de952e850d55c360497387550697534a8d5d2c

  • SHA256

    33796c5495a2eaf1fb3bd918cbf6d599c7cbd74462b693a802f834a91fa7ab40

  • SHA512

    0d434b0059e5e28fad60a1605402db5754269deeceb0353d40fb05a30656a4b7ed9f77c4994dd9382e92dfb5c4541d83594d4ca638fdfcffb2ee4ac5eaedf879

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2