Extracted

• • Target

    576c2ce07b215f9383f2935f906c523c0ac58a46239795af08d8c2eca9263ec9.exe

  • Size

    51KB

  • MD5

    5ceda99abca552519e012a36d2e371cb

  • SHA1

    81c2b36ab581339d7c1f96ba53c81023830dcef5

  • SHA256

    576c2ce07b215f9383f2935f906c523c0ac58a46239795af08d8c2eca9263ec9

  • SHA512

    4a4e9f01d86f491957edb92eefa2db3b36d37df1f20bfabd59b27b86d4e9a6f8187c58b40e0615cf7bc50bcd1aaa462d8ce1384251ec5be96834168d7fceb22b

  • SSDEEP

    768:oS8FZ30G5Crd40w728IshC1Kjb4PLknyS2v4MqHQejfmHj:ohZ3ekCKoPLknyS84W3Hj

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2