Extracted

• • Target

    T31597760-Confirm-20210520-100016-Email-1574401.exe

  • Size

    1006KB

  • MD5

    8addb03660ac849d116990b2c3f4bad8

  • SHA1

    f47dc617f55d4f8e7a06cc729b08ed1a5f2f518e

  • SHA256

    c5d7cbbe95c1ee46f8e76cd859295e56376a2b8985c2f50355e50fd966f05cd4

  • SHA512

    9a676bd4abe764dd774de5b678333af00211a7a0e7266054368697f35cb48a6df377f7d40eb1edc92a6e937028d9241ee29a40f4dd7a40fddebffe1811b5e93a

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2