Extracted

• • Target

    acd20b4a4d61ad35bc47851661ebc48e75c276ae50af870a1bb189cb2ed14c31

  • Size

    229KB

  • MD5

    629899cb8c761469ff1de32fd8e8e491

  • SHA1

    6a028323d0aa6c7ae8fbc198ded8594dae179c48

  • SHA256

    acd20b4a4d61ad35bc47851661ebc48e75c276ae50af870a1bb189cb2ed14c31

  • SHA512

    3bee357fb65d9a8ae3c5d268f4fb8d7ca2ec5546592225b707dcf203a2fef0abacd77f1c86555786e6554b87a1a4b5203a2be5bc7f7b1dca90daf68b72232a83

  • SSDEEP

    3072:AtD6jSm0uWRfCogTjVEGv+95IVp53D7+fQ1s+4DCS2Y2bA78bL92OH/:At1m0u65mEq+95OQQ+rCdY2b86My

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2