Overview

overview

10

Static

static

e4e6b094d3...bc.exe

windows7-x64

10

e4e6b094d3...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc

  • Size

    1.0MB

  • Sample

    221130-qw9v2ahb7x

  • MD5

    648acaf3557c01b8ec2603c52fd9af0c

  • SHA1

    8f17236309dc970e71a82e98350d13e251eb13c7

  • SHA256

    e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc

  • SHA512

    b5013ac6f3293f4e951c038509b42a2290061d468747e485a645a9c646d9f4d4a3e06e38489ffd927665cbf02fa00548e80ae2d73f2eced969db868666d494e4

  • SSDEEP

    24576:o4ucYlzO2zKpppGjnaQWEwbSkbaomesgU1xDEnL95qd3W:XK/lW

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

160.116.15.155:5200

Targets

    • Target

      e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc

    • Size

      1.0MB

    • MD5

      648acaf3557c01b8ec2603c52fd9af0c

    • SHA1

      8f17236309dc970e71a82e98350d13e251eb13c7

    • SHA256

      e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc

    • SHA512

      b5013ac6f3293f4e951c038509b42a2290061d468747e485a645a9c646d9f4d4a3e06e38489ffd927665cbf02fa00548e80ae2d73f2eced969db868666d494e4

    • SSDEEP

      24576:o4ucYlzO2zKpppGjnaQWEwbSkbaomesgU1xDEnL95qd3W:XK/lW

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzone RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks