General
-
Target
NpJGRwQsRYZnjWG.exe
-
Size
99KB
-
Sample
220921-c2p6xsaddq
-
MD5
b9d55f6c565d05c74d0a6609ace28899
-
SHA1
7f6d916814f074a430bfb05798f4ac19649e0140
-
SHA256
0f0472f9d6649caa9fd6ae7c8979fad2c51d676919320736e76434b4fe41e220
-
SHA512
e8eaa81f7a321679a632a91a02b93cc562c1053c2538a56ada7f716e77810dfac9c51dc293835db7037be17b003421c651f2ed6def67cc1a302ba847f84ec088
-
SSDEEP
1536:23P7aiRdDxXp2yc9q6qT+Ry0844UudNH6GLHWVE0UXD:29dZv9W844bdNvLHWVE06D
Behavioral task
behavioral1
Sample
NpJGRwQsRYZnjWG.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
NpJGRwQsRYZnjWG.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
warzonerat
hamzzaogolozar77.toythieves.com:5292
Targets
-
-
Target
NpJGRwQsRYZnjWG.exe
-
Size
99KB
-
MD5
b9d55f6c565d05c74d0a6609ace28899
-
SHA1
7f6d916814f074a430bfb05798f4ac19649e0140
-
SHA256
0f0472f9d6649caa9fd6ae7c8979fad2c51d676919320736e76434b4fe41e220
-
SHA512
e8eaa81f7a321679a632a91a02b93cc562c1053c2538a56ada7f716e77810dfac9c51dc293835db7037be17b003421c651f2ed6def67cc1a302ba847f84ec088
-
SSDEEP
1536:23P7aiRdDxXp2yc9q6qT+Ry0844UudNH6GLHWVE0UXD:29dZv9W844bdNvLHWVE06D
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-