Resumen detallado del proveedor de 1302640 de solicitud de presupuesto.exe

General
Target

Resumen detallado del proveedor de 1302640 de solicitud de presupuesto.exe

Size

1MB

Sample

210723-ljg9v7vxhn

Score
10 /10
MD5

6a0d38e42f95094a525a824ea5005766

SHA1

7dd0300cf123743cea7620e97a767d707190c08e

SHA256

e8c59da246fccfab27b1e04e4d2bae1f222e845c9573b7b0c5f01d90aa76a3a3

SHA512

3ac25e8931d7b17782edafb349144d192b29d3a5d920e38da9168347b636d3fb7e07fb6725a4e6c1a6d78c2a3db023bfca73c28489599d9d27fa4c0ba77ad445

Malware Config

Extracted

Family warzonerat
C2

79.134.225.8:8654

Targets
Target

Resumen detallado del proveedor de 1302640 de solicitud de presupuesto.exe

MD5

6a0d38e42f95094a525a824ea5005766

Filesize

1MB

Score
10 /10
SHA1

7dd0300cf123743cea7620e97a767d707190c08e

SHA256

e8c59da246fccfab27b1e04e4d2bae1f222e845c9573b7b0c5f01d90aa76a3a3

SHA512

3ac25e8931d7b17782edafb349144d192b29d3a5d920e38da9168347b636d3fb7e07fb6725a4e6c1a6d78c2a3db023bfca73c28489599d9d27fa4c0ba77ad445

Tags

Signatures

  • WarzoneRat, AveMaria

    Description

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          3/10

                          behavioral2

                          10/10