Overview

overview

10

Static

static

10

4412eb1d_e...ed.exe

windows7_x64

10

4412eb1d_e...ed.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4412eb1d_extracted

  • Size

    101KB

  • Sample

    210528-n2q4yybrvn

  • MD5

    dc57435c2506f48097817fb36035c376

  • SHA1

    de6f7a47ddebf15527e55a0f423f6adf752b79b8

  • SHA256

    fbceecb919805bf25f79b60685f86e29ea203a8be4629853a0e717b43f09016e

  • SHA512

    68c2bddd252f6bf8a7c3dbbd135a1858824b4adabb642f3e663defd6c0833cbff26b77dbf4d772fb50ef4e0f606913f860a4b697fb66e6b637c578ba47722ec6

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

speedballing.warzonedns.com:1949

Targets

    • Target

      4412eb1d_extracted

    • Size

      101KB

    • MD5

      dc57435c2506f48097817fb36035c376

    • SHA1

      de6f7a47ddebf15527e55a0f423f6adf752b79b8

    • SHA256

      fbceecb919805bf25f79b60685f86e29ea203a8be4629853a0e717b43f09016e

    • SHA512

      68c2bddd252f6bf8a7c3dbbd135a1858824b4adabb642f3e663defd6c0833cbff26b77dbf4d772fb50ef4e0f606913f860a4b697fb66e6b637c578ba47722ec6

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks