General
- Target 16256d9b6c82fec40a877c52da1aa5ae.exe
- Size 132KB
- Sample220911-h94beabca3
- SHA256 3da2da75681d61e8bcfde31b394b6512b4e1ba03fe7d436e9cbb9404ee95c9a5
- MD5 16256d9b6c82fec40a877c52da1aa5ae
- SHA1 87730e367bf64142c6b3d196425e4e828c3e51ff
- SHA512 f2d25c2ea753946cddb441ba184bfb71265951fa4a16ea10edac4bba7e93ae7e75fe8ccafcf6a2c99ed691fe6aa2aabce69a1366b419f2c5f2edfb77d1a4ef23
- SSDEEP 3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
16256d9b6c82fec40a877c52da1aa5ae.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
16256d9b6c82fec40a877c52da1aa5ae.exe
Resource
win10v2004-20220901-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
warzonerat
C2
-
mutaalofomaha.com:5566
Targets
-
- Target 16256d9b6c82fec40a877c52da1aa5ae.exe
- Size 132KB
- SHA256 3da2da75681d61e8bcfde31b394b6512b4e1ba03fe7d436e9cbb9404ee95c9a5
- MD5 16256d9b6c82fec40a877c52da1aa5ae
- SHA1 87730e367bf64142c6b3d196425e4e828c3e51ff
- SHA512 f2d25c2ea753946cddb441ba184bfb71265951fa4a16ea10edac4bba7e93ae7e75fe8ccafcf6a2c99ed691fe6aa2aabce69a1366b419f2c5f2edfb77d1a4ef23
- SSDEEP 3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Adds Run key to start application