Analysis
- max time kernel
132s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
13/09/2022, 18:47
Behavioral task
behavioral1
Sample
1e3acddc7186ceb7497df73db60539a3.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e3acddc7186ceb7497df73db60539a3.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1e3acddc7186ceb7497df73db60539a3.exe
- Size 98KB
- Sample220913-xe8pzagdc5
- SHA256 97b221ffa636705b21793d9d4c95f08c5f8fb21ef228dcb8b96fdc9705c91bc0
- MD5 1e3acddc7186ceb7497df73db60539a3
- SHA1 d6628212454f87838b1ee971aed0b1e1c8a27477
- SHA512 eca93a35bff590b9ec11b79b0c4fc6ddac937a5c2fc6223f29df5d215d8b1a14b2f1063421d539a949b928013df1813fc3bb3be8413ade592d589bc2570b2236
- SSDEEP 1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.