Overview

overview

10

Static

static

10

01_extracted.exe

windows7_x64

10

01_extracted.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01_extracted.exe

  • Size

    98KB

  • Sample

    210604-ttplzvtxen

  • MD5

    5af35b0b2291bb9e7b75e23db628aeef

  • SHA1

    d7183a55f7c234e9a600cffa738f05e47369c856

  • SHA256

    43490180b4583c61964bfaca6cbe9558e885a49b87482f4d326c185667b6ed69

  • SHA512

    721c27b151c5d4e4df7ad40fcc3001a0a4b971074358748e03508ed55ad3d05abc37552b1036592ef83f46200ffd17ba999298c91efdec90ffafe17080be55d9

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

5.206.224.194:3080

Targets

    • Target

      01_extracted.exe

    • Size

      98KB

    • MD5

      5af35b0b2291bb9e7b75e23db628aeef

    • SHA1

      d7183a55f7c234e9a600cffa738f05e47369c856

    • SHA256

      43490180b4583c61964bfaca6cbe9558e885a49b87482f4d326c185667b6ed69

    • SHA512

      721c27b151c5d4e4df7ad40fcc3001a0a4b971074358748e03508ed55ad3d05abc37552b1036592ef83f46200ffd17ba999298c91efdec90ffafe17080be55d9

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks