Overview

overview

10

Static

static

10

4176-183-0...ry.exe

windows7-x64

4176-183-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4176-183-0x0000000000400000-0x0000000000554000-memory.dmp

  • Size

    1.3MB

  • MD5

    cd05442ad18c592b8692eee01a7eb0f0

  • SHA1

    e62afa9f0ef4ca9c1d341503f46be3b46252eaa2

  • SHA256

    9547a177cdabccd52657c175366d5a4b90de91914128ee20fb3d1efe066556e0

  • SHA512

    dc4642906d6b82e3b53bdfcd1b76694f3c7a29765deb8bfc14566f140f5b3344a4d14d6fb21a20b3d9fd64e7779b9c86e03fbffcc5046b310d78ab03523569bf

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

chinagov.duckdns.org:5202

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat

Files

  • 4176-183-0x0000000000400000-0x0000000000554000-memory.dmp
    .exe windows x86


    Headers

    Sections