Extracted

• • Target

    image_1_fixed.bin

  • Size

    1.3MB

  • MD5

    6c619e498a706f721b253c37566be47c

  • SHA1

    b74ca4f5f2c2f0636f60de96648e2825e2ab3a26

  • SHA256

    92a9815ec022fa578ffff992602b38249bbc96e22347437cf39045e89990cfee

  • SHA512

    d2fe0e0161935b9c20f3ec1d137b585ec20c0b6eab0e7b5c86ce75dec325db051d4030efd59415b40fd823b4759b66f4ebaa8b329ffe4f982e5fe4135f8253dc

  • SSDEEP

    1536:I0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWNB4u0OVE01:L1VmhaH8EFvWN0OVE0

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2