Extracted

• • Target

    6890cf6bbdd42339fd7c09bad0ea7133.exe

  • Size

    776KB

  • MD5

    6890cf6bbdd42339fd7c09bad0ea7133

  • SHA1

    544f5172351a14f5de8372addbcf3f558ec8ee8e

  • SHA256

    2f581b0071cfc17ac68e4ec23cc42d3f2f66867f57f21a2b705cf4eea616c584

  • SHA512

    6146f2f77b78600b564cf256c2e5e3669e58954fcd4a40e4596b75f7168bbdfd0eefde6f20d5ca9269562aae4754111993b5c380c418195d80080b3920a9325e

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2