General

  • Target

    bfea7b3d5361dd9a85527dad9b023c61.exe

  • Size

    141KB

  • Sample

    230518-fkn43shg52

  • MD5

    bfea7b3d5361dd9a85527dad9b023c61

  • SHA1

    68863f24803b1bccabaa2d93ae2354f45ac65a2a

  • SHA256

    d7453f79475116a8f7012c6e878c5c6f6c7ce4cb007aaa769f04c7a45cd3b7d6

  • SHA512

    3b866992be04f42e25f9ddfa43a8e47b85acfa0a0f420056da6a624409f4c0a5cbfb58a15e7f19d477557b00f6c783cc3321c86b55e64c95d8b7147de1046bea

  • SSDEEP

    3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

Malware Config

Extracted

Family

warzonerat

C2

8.212.151.157:5200

Targets

    • Target

      bfea7b3d5361dd9a85527dad9b023c61.exe

    • Size

      141KB

    • MD5

      bfea7b3d5361dd9a85527dad9b023c61

    • SHA1

      68863f24803b1bccabaa2d93ae2354f45ac65a2a

    • SHA256

      d7453f79475116a8f7012c6e878c5c6f6c7ce4cb007aaa769f04c7a45cd3b7d6

    • SHA512

      3b866992be04f42e25f9ddfa43a8e47b85acfa0a0f420056da6a624409f4c0a5cbfb58a15e7f19d477557b00f6c783cc3321c86b55e64c95d8b7147de1046bea

    • SSDEEP

      3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks