Overview

overview

10

Static

static

10

4900-149-0...ry.exe

windows7-x64

1

4900-149-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    4900-149-0x0000000000400000-0x000000000055A000-memory.dmp

  • Size

    1.4MB

  • MD5

    5cf45d7fa2a5d9bd21a6961275a6b16d

  • SHA1

    47508ce15aeae3c00202e32c5ab57beddcc9f18f

  • SHA256

    b57a5ef5f35993a34fbd6f93b0f5a02fb1ce5cce00215517eb6aad73a0c211b9

  • SHA512

    c673951733045d78d7fb9398f9c47f4aa1da145523456580c9c8c583b5febf36e72d0a99fa399e8b7fe5bec6fc143e830f30f4d56007c00868ab2e997fe45baa

  • SSDEEP

    3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

hannoyputa.giize.com:3027

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat

Files

  • 4900-149-0x0000000000400000-0x000000000055A000-memory.dmp
    .exe windows x86


    Headers

    Sections