Static task
static1
Behavioral task
behavioral1
Sample
cedbf0cf_extracted.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cedbf0cf_extracted.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
cedbf0cf_extracted
-
Size
101KB
-
MD5
8f0e82e303487711e319cc9ece505520
-
SHA1
8cb59f8be0e1a0be7e95aabdf7dc32b979d9c307
-
SHA256
438be9e574213e71135a3bd5cc2ad983287579287432d64559ea40a32823bb82
-
SHA512
78667fa6702e06c8e16a5e767006a2a2daa12fdd60363fa15ca85d18efa1668bcc7d70b3ed0c87a6480a4153bcec3879f656e41028e3c6e58901955a35a95750
Score
10/10
Malware Config
Extracted
Family
warzonerat
C2
au.warzonedns.com:1381
Signatures
-
Warzone RAT Payload 1 IoCs
Processes:
resource yara_rule sample warzonerat -
Warzonerat family
Files
-
cedbf0cf_extracted.exe windows x86