General
-
Target
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
Size
2.7MB
-
Sample
221130-vhej7aca31
-
MD5
929e273df39203b88fc0c897b504472f
-
SHA1
ee35a79bdbefee34312f7f237f8688c97222df5f
-
SHA256
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
SHA512
e446b401ae3a4fe30548b1712d5bd2c2932c09101562e40164994b2a476b598fb2fdb31e6273659e646cea3b827c83643120516fdfdb06b6216a4ae6ab81e2db
-
SSDEEP
12288:elIWrmkJpUt/3HrRz1t1DdlIReHex/f3OmZ:otUtbDdlIReHo35
Static task
static1
Behavioral task
behavioral1
Sample
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
warzonerat
45.145.185.52:5200
Targets
-
-
Target
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
Size
2.7MB
-
MD5
929e273df39203b88fc0c897b504472f
-
SHA1
ee35a79bdbefee34312f7f237f8688c97222df5f
-
SHA256
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
SHA512
e446b401ae3a4fe30548b1712d5bd2c2932c09101562e40164994b2a476b598fb2fdb31e6273659e646cea3b827c83643120516fdfdb06b6216a4ae6ab81e2db
-
SSDEEP
12288:elIWrmkJpUt/3HrRz1t1DdlIReHex/f3OmZ:otUtbDdlIReHo35
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-