Overview

overview

10

Static

static

10

1212-54-0x...ry.dll

windows7-x64

1

1212-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1212-54-0x00000000008E0000-0x0000000000A3C000-memory.dmp

  • Size

    1.4MB

  • MD5

    a14f126d34ab77b5852e2d5063fcd188

  • SHA1

    65278780b9d353a4b038723b5d4b775d4d0bc615

  • SHA256

    ddd55721de17c88b79a9f981eb0db37cef43ff39f43a75b790e70a992bfe8041

  • SHA512

    9f8766f3b085d163bd7d458b70dbd895b790170562c8b53008f9869a897a796e2537f6706a9429c2ff57ee2f9409d39c7935e18634b7c7d3ecfc768374e3436e

  • SSDEEP

    3072:gTuvXHO0vxMuTSTZeMSO28Y/kUppUSKyLMzYzHixgGTyIw:gejpTSTZeMSO2prgyLGYzDGTdw

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

172.94.88.130:2030

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1212-54-0x00000000008E0000-0x0000000000A3C000-memory.dmp
    .dll windows x86


    Headers

    Sections