Analysis

  • max time kernel
    91s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    18-06-2022 14:58

General

  • Target

    ConsoleApp1.exe

  • Size

    118KB

  • MD5

    3953d3fa4fc9bb0b56ca8ab21cd10c02

  • SHA1

    ddd6a2fe621297cf98d5f8e49fb73cc16de3a12b

  • SHA256

    f39b59ac3799b134b02f8030b5658ef8c0d459fed07a914c5c58918a13d85a69

  • SHA512

    cb400313f116bf214409430509fb4c328c884dae99ece8079cc2eed70a26c39d39a887fa352c082582c03acd318d2e798a60762d719188b2233badac94246b3b

Malware Config

Signatures

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

  • Warzone RAT Payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ConsoleApp1.exe
    "C:\Users\Admin\AppData\Local\Temp\ConsoleApp1.exe"
    1⤵
      PID:1676

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1676-130-0x00000000000F0000-0x0000000000114000-memory.dmp
      Filesize

      144KB