General
-
Target
5C0DEC367A4E9093709E84687E3F8243.exe
-
Size
113KB
-
Sample
210522-xa74ts8j86
-
MD5
5c0dec367a4e9093709e84687e3f8243
-
SHA1
6f8dea25aca43c8d327efe65bd7ac8c4c75ea26e
-
SHA256
d04df2cc01b68e655bdd0c7f0806fe2837afa989ac95a3b066ec9bef66e169ae
-
SHA512
f60ab6dd0e660366405c3f1c4ff9c494bd84d5674f4ff2427d9954fc380b3796a2feb8be05643444c52f95a0cad7c94c0db8170a4a450ae31b2d51adc24d4c0c
Static task
static1
Behavioral task
behavioral1
Sample
5C0DEC367A4E9093709E84687E3F8243.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
5C0DEC367A4E9093709E84687E3F8243.exe
Resource
win10v20210410
Malware Config
Extracted
warzonerat
4kr4m0.ddns.net:5200
Targets
-
-
Target
5C0DEC367A4E9093709E84687E3F8243.exe
-
Size
113KB
-
MD5
5c0dec367a4e9093709e84687e3f8243
-
SHA1
6f8dea25aca43c8d327efe65bd7ac8c4c75ea26e
-
SHA256
d04df2cc01b68e655bdd0c7f0806fe2837afa989ac95a3b066ec9bef66e169ae
-
SHA512
f60ab6dd0e660366405c3f1c4ff9c494bd84d5674f4ff2427d9954fc380b3796a2feb8be05643444c52f95a0cad7c94c0db8170a4a450ae31b2d51adc24d4c0c
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Adds Run key to start application
-