Overview

overview

10

Static

static

10

5004-139-0...ry.exe

windows7-x64

5004-139-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    5004-139-0x0000000000400000-0x0000000000554000-memory.dmp

  • Size

    1.3MB

  • MD5

    9cd460f19d1172d02525a817214c1704

  • SHA1

    77b16213d7106ab4b0e37fd4d4282a97e14690ea

  • SHA256

    f0cc157c0edcc0f77225a66b64e76d8c6633312f9d8bab9748bc45bd2674d595

  • SHA512

    fe91cce68b0a2b152c3de689ea02c2dd3a7c52f4fac21c01e7b6b94c054bf199d27684282f8f581a9d4c6a416894f9662a9f4a2bea833bde4c7fd196fd1e3603

  • SSDEEP

    1536:z0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:g1VmhaH8EFvW+0OVE0

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

195.178.120.120:3702

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat

Files

  • 5004-139-0x0000000000400000-0x0000000000554000-memory.dmp
    .exe windows x86


    Headers

    Sections