General

  • Target

    NpJGRwQsRYZnjWG.exe

  • Size

    99KB

  • Sample

    220921-c2p6xsaddq

  • MD5

    b9d55f6c565d05c74d0a6609ace28899

  • SHA1

    7f6d916814f074a430bfb05798f4ac19649e0140

  • SHA256

    0f0472f9d6649caa9fd6ae7c8979fad2c51d676919320736e76434b4fe41e220

  • SHA512

    e8eaa81f7a321679a632a91a02b93cc562c1053c2538a56ada7f716e77810dfac9c51dc293835db7037be17b003421c651f2ed6def67cc1a302ba847f84ec088

  • SSDEEP

    1536:23P7aiRdDxXp2yc9q6qT+Ry0844UudNH6GLHWVE0UXD:29dZv9W844bdNvLHWVE06D

Malware Config

Extracted

Family

warzonerat

C2

hamzzaogolozar77.toythieves.com:5292

Targets

    • Target

      NpJGRwQsRYZnjWG.exe

    • Size

      99KB

    • MD5

      b9d55f6c565d05c74d0a6609ace28899

    • SHA1

      7f6d916814f074a430bfb05798f4ac19649e0140

    • SHA256

      0f0472f9d6649caa9fd6ae7c8979fad2c51d676919320736e76434b4fe41e220

    • SHA512

      e8eaa81f7a321679a632a91a02b93cc562c1053c2538a56ada7f716e77810dfac9c51dc293835db7037be17b003421c651f2ed6def67cc1a302ba847f84ec088

    • SSDEEP

      1536:23P7aiRdDxXp2yc9q6qT+Ry0844UudNH6GLHWVE0UXD:29dZv9W844bdNvLHWVE06D

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks