Overview

overview

10

Static

static

10

dump.bin.exe

windows7_x64

10

dump.bin.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dump.bin

  • Size

    113KB

  • Sample

    211028-k28l9sbhc5

  • MD5

    bbb2a0084eb5f17a2de565cae720544e

  • SHA1

    2e03043c821da3a8a937c2420329d021524e640d

  • SHA256

    a97c3b1c84c38b02b38d32111597540c3591f7ba55f368f7f567315eb72cc3b7

  • SHA512

    0d29a2c508e0c4afbef5dc0569f15c80f79466a6dcc460af309255688dfa79bb880f32fd4fed784d7e76d5760638a5da4623aa8eb34a5fb2adb6bca9bc165b35

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

KTS666.PUBLICVM.COM:5200

Targets

    • Target

      dump.bin

    • Size

      113KB

    • MD5

      bbb2a0084eb5f17a2de565cae720544e

    • SHA1

      2e03043c821da3a8a937c2420329d021524e640d

    • SHA256

      a97c3b1c84c38b02b38d32111597540c3591f7ba55f368f7f567315eb72cc3b7

    • SHA512

      0d29a2c508e0c4afbef5dc0569f15c80f79466a6dcc460af309255688dfa79bb880f32fd4fed784d7e76d5760638a5da4623aa8eb34a5fb2adb6bca9bc165b35

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks