Extracted

• • Target

    DLLclnbldwrz189r.exe

  • Size

    509KB

  • MD5

    ea66109d778e103e3ce06ee6b389367a

  • SHA1

    14cda06a0640840671fe9fd8e8273246f0db9e1a

  • SHA256

    78f124b7a00d29a4573c261f1ef8be979ce46c347371365ba820ba5750422f88

  • SHA512

    84fd40a1c538aefcf4a703df4c64b943b38b34f9a26cb35c247f5be59a55f5f8d31c216f81ffa79cb7611fde790a7b8bf62fe20ce50633df41ac2b96b9d99155

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1