Extracted

• • Target

    SOA72736467388453latest.exe

  • Size

    261KB

  • MD5

    676cf08fb03d8a9ffcf5ab5d36447c15

  • SHA1

    d5affa18c7ec3b13bc91f103d08e9b779ccd5560

  • SHA256

    5b3b7ebe915f592364c520775e220965c95bdb9dee6160de07993866645c0dea

  • SHA512

    05c458b547d715ae0ca5d9d4a7c55b699b35b087a28584deb9f7720f8ed70b464690749c6e60a6f64f4d348f7c5f36837baac29ee7c1c76543972ff155d1e5e1

  • SSDEEP

    6144:NBHhJHDyzWdMSHDPUEPFWjlxUTm7LcTbTeEZFH0pviB9jV5QR:NJhNdMS1Ajlaq7LcHT9qsB

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2