General
-
Target
bnUeC95F41kCZTTTu_cm-nwOnIwqjv-139OZEsTrG34.bin
-
Size
1.0MB
-
Sample
210726-39p33911cs
-
MD5
b8b67c16029de86734bc326cc8ee10bc
-
SHA1
5ad452ed075d370508aa699c82f650b9e97fc7be
-
SHA256
6e751e0bde45e359026534d3bbe726fe7c0e9c8c2a8efff5dfd39912c4eb1b7e
-
SHA512
e0a35000f7978e5f1faab42f2e10109546f99c0146e4c252f4080819bef0f523e95051a853dfce1d6fc1eeb5e55ca6ce7a84f665c84630e8c5bfc19809b97d4c
Static task
static1
Behavioral task
behavioral1
Sample
bnUeC95F41kCZTTTu_cm-nwOnIwqjv-139OZEsTrG34.bin.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
bnUeC95F41kCZTTTu_cm-nwOnIwqjv-139OZEsTrG34.bin.exe
Resource
win10v20210408
Malware Config
Extracted
warzonerat
185.222.57.73:4557
Targets
-
-
Target
bnUeC95F41kCZTTTu_cm-nwOnIwqjv-139OZEsTrG34.bin
-
Size
1.0MB
-
MD5
b8b67c16029de86734bc326cc8ee10bc
-
SHA1
5ad452ed075d370508aa699c82f650b9e97fc7be
-
SHA256
6e751e0bde45e359026534d3bbe726fe7c0e9c8c2a8efff5dfd39912c4eb1b7e
-
SHA512
e0a35000f7978e5f1faab42f2e10109546f99c0146e4c252f4080819bef0f523e95051a853dfce1d6fc1eeb5e55ca6ce7a84f665c84630e8c5bfc19809b97d4c
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
suricata: ET MALWARE Possible Malicious Macro DL EXE Feb 2016
-
Warzone RAT Payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-