Analysis
-
max time kernel
182s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
22-11-2022 11:26
General
-
Target
548a3af7618d0bb437996d197d02871f.exe
-
Size
189KB
-
MD5
548a3af7618d0bb437996d197d02871f
-
SHA1
7ae3ddb651722e9d60ab785520971f31ff3521fc
-
SHA256
0f3d2d1c663f1e9933c65c73ea89458b895e0bb29e8b10fbd8e99a18379fa2df
-
SHA512
f898aba98e9fc1934b16cf78dffd2669719157bd22c9febbc38eaef55bfa6981986ef95e1e86912fbca8a7b894ca58aa63a9f8553a2850c32eec7358a39d60f1
-
SSDEEP
3072:WzPtbXqn6aR97tie5Niae2vl23G3Fzyjfz8LTD1:Wz1bXq6aR97ViJ2vlz9yjfz8LT
Score
10/10
Malware Config
Signatures
-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
Processes
-
C:\Users\Admin\AppData\Local\Temp\548a3af7618d0bb437996d197d02871f.exe"C:\Users\Admin\AppData\Local\Temp\548a3af7618d0bb437996d197d02871f.exe"1⤵