Extracted

• • Target
    f1f4236ceb4c0b97583de4744e4f30b5.exe
  • Size 152KB
  • SHA256 0fb4fd33e3c5368794c0f8e8d5556ef25f1fc808e8db64c9b45e7949e6ee4736
  • MD5 f1f4236ceb4c0b97583de4744e4f30b5
  • SHA1 41e8585656af94ba33b1810eadecf30dc9a42fb4
  • SHA512 06ddd7b3c06fc7984195c27246759aa5a51a45447909f3ab67bee217491f0eb5e285227e22bd1111ccaa25c7c3c29e61fa484293e0651c77f0146566a56044b3
  • SSDEEP 3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:4NLYdT97JSIFl0QENqF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  warzoneratinfostealerratcollectionspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2