Extracted

• • Target

    831e4102b5901ad809e6a2b2460901b48a8c7c0a6786620e1266c51dd22777c3

  • Size

    99KB

  • MD5

    990a0c672b7c9b32833d8ecdd275cd81

  • SHA1

    04d436143bfbe87f09dac7f6ecf9f6ebb68c5081

  • SHA256

    831e4102b5901ad809e6a2b2460901b48a8c7c0a6786620e1266c51dd22777c3

  • SHA512

    4a11ca8da42b0ecd3c12462d56a1f4f27dcb02e6bbc4c9b8e988528b2217ebd07dcb3cfe5c51966bff0ba9dc6e44277dd21758d09f09e33d076fb3294a8a28d1

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2