Extracted

• • Target

    6.exe

  • Size

    3.1MB

  • MD5

    341aac609408d648208af28175524839

  • SHA1

    7d573d721f569056258ac491e09c0b0faa0839e9

  • SHA256

    e6423c68a7adf96f2bdeeafeb94f9891b6c05bac83e6df0695ebbdf37e01fb15

  • SHA512

    2dae6ed8c479358b04248f4d4f0d61f234601e2ca9d1434be82bae339e8080138a92381d05e2e7454afa20d85192091920bd39693c0a440a5a9cc4986b2a67cb

  Score

  10^/10

  warzoneratinfostealerpersistenceratspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence
  behavioral1behavioral2