Extracted

• • Target

    5d5e419a42d86763932c38d996c8e59c0b30e093bddcd5cb2cf09c07635b7a31

  • Size

    216KB

  • MD5

    4eac968a4fcd0e6bad79ca6eecbd08d8

  • SHA1

    a1f8bc409f3d0df06094a5e389bf71be24f4b855

  • SHA256

    5d5e419a42d86763932c38d996c8e59c0b30e093bddcd5cb2cf09c07635b7a31

  • SHA512

    380b7f4519feab142495ef84f0260c1d29370acf641990df81184fdfb918070a86e8e0e62b99704ce2b0faf7ccd6cfc0eb7678288d914e351ea00eb486c8aa98

  • SSDEEP

    6144:HKcOrIV4ILN3t1cNCUUUx/9ygRC6LcuD:HKcOrIV753t1cso/XUC

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2