Overview

overview

10

Static

static

10

400000.asp...er.exe

windows7_x64

10

400000.asp...er.exe

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    07-06-2021 19:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    400000.aspnet_compiler.exe

  • Size

    98KB

  • MD5

    fe0b7f8d2278f25ec695c44b8238219c

  • SHA1

    2d74c907982b99b7f16fefce6bb811ac3a316299

  • SHA256

    47e4be1d34037d747ecca53a3898297bd9d15ae4e8cc5dd505eaa72036470af6

  • SHA512

    5592b6f8f78244b70ab6b62b96a96b7aa1ba68fca1bc6431379e20de46990a7055200e70fb14ac5ee00f4510f01883f0d25c3bc61cab7e0155a32fecc27e1b79

Score
10/10
warzoneratinfostealerrat

Malware Config

Signatures

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

Processes

  • C:\Users\Admin\AppData\Local\Temp\400000.aspnet_compiler.exe
    "C:\Users\Admin\AppData\Local\Temp\400000.aspnet_compiler.exe"
    1⤵
      PID:784

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/784-60-0x0000000075AA1000-0x0000000075AA3000-memory.dmp

      Filesize

      8KB

      Download