Overview

overview

10

Static

static

10

1044-81-0x...ry.exe

windows7-x64

1044-81-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1044-81-0x0000000000400000-0x000000000041D000-memory.dmp

  • Size

    116KB

  • MD5

    4967d758abb3a41033bb1c9dadfd25ef

  • SHA1

    4e02cbff618b1597b0c9915e05e4013821ec61e5

  • SHA256

    dd6589a37c18b2be52d25ae67e481c0446008c166bb92849a41922af7da481fb

  • SHA512

    2004dc244cb9160c777dd74e8e7f74fc0d6939abff84184b7dec3cd79a7c23e691251b5190637c9cc85bc08acc4a93ec92465f67c8dd8182a44998a3d7d048dd

  • SSDEEP

    1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

osairus.duckdns.org:4244

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1044-81-0x0000000000400000-0x000000000041D000-memory.dmp
    .exe windows x86


    Headers

    Sections