General
- Target 1e3acddc7186ceb7497df73db60539a3.exe
- Size 98KB
- Sample220913-xe8pzagdc5
- SHA256 97b221ffa636705b21793d9d4c95f08c5f8fb21ef228dcb8b96fdc9705c91bc0
- MD5 1e3acddc7186ceb7497df73db60539a3
- SHA1 d6628212454f87838b1ee971aed0b1e1c8a27477
- SHA512 eca93a35bff590b9ec11b79b0c4fc6ddac937a5c2fc6223f29df5d215d8b1a14b2f1063421d539a949b928013df1813fc3bb3be8413ade592d589bc2570b2236
- SSDEEP 1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1e3acddc7186ceb7497df73db60539a3.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e3acddc7186ceb7497df73db60539a3.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
warzonerat
C2
-
blackbenz.duckdns.org:2424
Targets
-
- Target 1e3acddc7186ceb7497df73db60539a3.exe
- Size 98KB
- SHA256 97b221ffa636705b21793d9d4c95f08c5f8fb21ef228dcb8b96fdc9705c91bc0
- MD5 1e3acddc7186ceb7497df73db60539a3
- SHA1 d6628212454f87838b1ee971aed0b1e1c8a27477
- SHA512 eca93a35bff590b9ec11b79b0c4fc6ddac937a5c2fc6223f29df5d215d8b1a14b2f1063421d539a949b928013df1813fc3bb3be8413ade592d589bc2570b2236
- SSDEEP 1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.