Overview

overview

10

Static

static

10

3648-344-0...ry.exe

windows7-x64

10

3648-344-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3648-344-0x0000000010670000-0x00000000107D0000-memory.dmp

  • Size

    1.4MB

  • Sample

    221027-jv6zesbeck

  • MD5

    cd7cc0b78c4543790f17d1f166376e3f

  • SHA1

    f2d1bb742a1dae4c74db08c4d86c22c41a27c646

  • SHA256

    d85d90a3a922e38c22caab5e255d24120377df371d05bc92628b0d80eea7b79b

  • SHA512

    6cf62bcf9f82544711d7517c8137da089bd87c8cf6b212770ae3875029bec71f845edb1b514dc4ec2465378d4f76fd35d4f2e0ae393efd85ff5fb52544a5f420

  • SSDEEP

    3072:iNLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:iNLYdT97JSIFl0QENqF

Score
10/10
warzoneratinfostealerrat

Malware Config

Targets

    • Target

      3648-344-0x0000000010670000-0x00000000107D0000-memory.dmp

    • Size

      1.4MB

    • MD5

      cd7cc0b78c4543790f17d1f166376e3f

    • SHA1

      f2d1bb742a1dae4c74db08c4d86c22c41a27c646

    • SHA256

      d85d90a3a922e38c22caab5e255d24120377df371d05bc92628b0d80eea7b79b

    • SHA512

      6cf62bcf9f82544711d7517c8137da089bd87c8cf6b212770ae3875029bec71f845edb1b514dc4ec2465378d4f76fd35d4f2e0ae393efd85ff5fb52544a5f420

    • SSDEEP

      3072:iNLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:iNLYdT97JSIFl0QENqF

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks