General

  • Target

    4596-143-0x0000000000400000-0x0000000000554000-memory.dmp

  • Size

    1.3MB

  • MD5

    6b4edc01532c6d47befdc20a2d92decd

  • SHA1

    15bd296f928c051493f9a53292f6b1bd2c5a06cc

  • SHA256

    7e52d508e78685d290d0851702a3759fde71538baa844b0f08d21c86d84af4bc

  • SHA512

    97693781190c7f5e8e39ab4e7ad09b26ce1ec6eb01407eaaf170444b68dde500f44ced85f6008379dc639156f37cf22561560236f00af7fb4eb5471f470ecd55

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

willia2.ddns.net:5059

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family

Files

  • 4596-143-0x0000000000400000-0x0000000000554000-memory.dmp
    .exe windows x86


    Headers

    Sections