General

  • Target

    1004-76-0x0000000000400000-0x000000000041D000-memory.dmp

  • Size

    116KB

  • MD5

    d7a74eaa3002ecf5e2c9826be0487400

  • SHA1

    9e7dd10708d0098769eae8dfcd1b62b6e595006d

  • SHA256

    eee268cdf1c938160d83e68cbb9f116ec73872eab28e5816cd11d545c71d7b7c

  • SHA512

    aa511a7fd01be7e0385e5dc4a4f3633567a2b5b05eb76b7aa52c7238137ed2956b18a16fcf9de4d117676fe4d79b3657d2465fff771df1d0e04eb0f41eb29abf

  • SSDEEP

    1536:5Csejmb+6BQyusX1UjtA0uWRf/elocg9T1jVEyVA:AtD6jSm0uWRfCoDTjVEqA

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

workbro.duckdns.org:1992

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family

Files

  • 1004-76-0x0000000000400000-0x000000000041D000-memory.dmp
    .exe windows x86


    Headers

    Sections