Overview

overview

10

Static

static

10

c62b1fdc54...22.exe

windows7_x64

10

c62b1fdc54...22.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c62b1fdc546779ba469db64d1cb60e22

  • Size

    113KB

  • Sample

    210710-s514wplkvj

  • MD5

    c62b1fdc546779ba469db64d1cb60e22

  • SHA1

    4ed27e66827e84742e9bf004a946ef885eb63339

  • SHA256

    3227adef3bb92d94337e08fba6b7a73dbc93b06239d6af04625c571f6755fd6e

  • SHA512

    05da8cbf014406d10d9273707ac0c4524176bff8da11340a93c86380f5bcdbc95f63e0c4bc7ac072cc2a4d77972554d1e75f945943ac7b1793bf89f05e3c4197

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

147.124.212.196:1111

Targets

    • Target

      c62b1fdc546779ba469db64d1cb60e22

    • Size

      113KB

    • MD5

      c62b1fdc546779ba469db64d1cb60e22

    • SHA1

      4ed27e66827e84742e9bf004a946ef885eb63339

    • SHA256

      3227adef3bb92d94337e08fba6b7a73dbc93b06239d6af04625c571f6755fd6e

    • SHA512

      05da8cbf014406d10d9273707ac0c4524176bff8da11340a93c86380f5bcdbc95f63e0c4bc7ac072cc2a4d77972554d1e75f945943ac7b1793bf89f05e3c4197

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks