Extracted

• • Target

    PDF.exe

  • Size

    141KB

  • MD5

    cdcdbe253da2dfdf3792f26681bbd14e

  • SHA1

    bd1a0365d57366f2e1e50834c03e885784a23dd9

  • SHA256

    c512bba369f7480f1682546ba31ac48e290887f1209a8dbbfdd1ed3de2544095

  • SHA512

    c509d15405892d24b832c2e2984587d7cd73f96e14c346be7282da8f881cae1d8e0ef3250eabc97f71247c529ce1cacae5fd064860edd6fc74a78a7746015650

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2