Overview

overview

10

Static

static

10

decoded-2.exe

windows7-x64

10

decoded-2.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    decoded-2.exe

  • Size

    189KB

  • Sample

    221129-vkp4psbf4v

  • MD5

    9b04d1482c7baa98d89e2d30d17172b5

  • SHA1

    71679524e9e32b5ff5ad6a8d0476aad284a846f1

  • SHA256

    925206ecf4ece942fa0ee18d8f6100cf4d90790cdf60946f342ad56d9db3848d

  • SHA512

    263a9ccd51e4f273c37b0c982d4fc1a652c0e3f9ad8f13709d4d049601b30451fcfc77bf91afd26e7d8eb6edf581ac0c19afdef6bc85ebf7187ef145b56d1495

  • SSDEEP

    3072:WzPtbXqn6aR97tie5Niae2vl23G3Fzyffz8LTDhY:Wz1bXq6aR97ViJ2vlz9yffz8LTi

Score
10/10
warzoneratinfostealerrat

Malware Config

Targets

    • Target

      decoded-2.exe

    • Size

      189KB

    • MD5

      9b04d1482c7baa98d89e2d30d17172b5

    • SHA1

      71679524e9e32b5ff5ad6a8d0476aad284a846f1

    • SHA256

      925206ecf4ece942fa0ee18d8f6100cf4d90790cdf60946f342ad56d9db3848d

    • SHA512

      263a9ccd51e4f273c37b0c982d4fc1a652c0e3f9ad8f13709d4d049601b30451fcfc77bf91afd26e7d8eb6edf581ac0c19afdef6bc85ebf7187ef145b56d1495

    • SSDEEP

      3072:WzPtbXqn6aR97tie5Niae2vl23G3Fzyffz8LTDhY:Wz1bXq6aR97ViJ2vlz9yffz8LTi

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks