Overview

overview

10

Static

static

10

warzone ra...ew.exe

windows7-x64

10

warzone ra...ew.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    warzone rawfile new.exe

  • Size

    113KB

  • Sample

    221205-td68zaea27

  • MD5

    7aa7c2c90371cf809dac01092c13d63e

  • SHA1

    5a41e80d24d965f039fca837ecdd6322ca673d4e

  • SHA256

    ff3f9f08d7956fb6699d0d58f7f02aef326a981a6433b3fa89bb550a90495602

  • SHA512

    dbb068e8d2ad9ec64845d43fe993c0f0978b93a3aae616392993e17ec48add26b3521a69003cefd8c71586cf35220b61f52f75cfa5835331d85ffea4018b185f

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

76.8.53.133:1198

Targets

    • Target

      warzone rawfile new.exe

    • Size

      113KB

    • MD5

      7aa7c2c90371cf809dac01092c13d63e

    • SHA1

      5a41e80d24d965f039fca837ecdd6322ca673d4e

    • SHA256

      ff3f9f08d7956fb6699d0d58f7f02aef326a981a6433b3fa89bb550a90495602

    • SHA512

      dbb068e8d2ad9ec64845d43fe993c0f0978b93a3aae616392993e17ec48add26b3521a69003cefd8c71586cf35220b61f52f75cfa5835331d85ffea4018b185f

    • SSDEEP

      1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks