Overview

overview

10

Static

static

3

72ceccc999...f5.exe

windows7-x64

10

72ceccc999...f5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72ceccc9998a49d984bf8648262304f5.exe

  • Size

    260KB

  • Sample

    230604-vzt17sch57

  • MD5

    72ceccc9998a49d984bf8648262304f5

  • SHA1

    3c37827070f8d4eb726f59a0d4f2db0d8f1232ca

  • SHA256

    2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc

  • SHA512

    f7cc1322e1132bd07290ea494d70fc9f358c7f7e6667656122e5dde93b236a968c97446e8003add8055122847e633e8a4d86bb33d44c3cce9ca71c8a1083bb74

  • SSDEEP

    3072:x6sSW20yS19d7Y5fLagUTxegZtSR/E4jOC:QsSWZ19d7Y55UTx7Zta/

Score
10/10
warzoneratdiscoveryinfostealerratspywarestealer

Malware Config

Targets

    • Target

      72ceccc9998a49d984bf8648262304f5.exe

    • Size

      260KB

    • MD5

      72ceccc9998a49d984bf8648262304f5

    • SHA1

      3c37827070f8d4eb726f59a0d4f2db0d8f1232ca

    • SHA256

      2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc

    • SHA512

      f7cc1322e1132bd07290ea494d70fc9f358c7f7e6667656122e5dde93b236a968c97446e8003add8055122847e633e8a4d86bb33d44c3cce9ca71c8a1083bb74

    • SSDEEP

      3072:x6sSW20yS19d7Y5fLagUTxegZtSR/E4jOC:QsSWZ19d7Y55UTx7Zta/

    Score
    10/10
    warzoneratdiscoveryinfostealerratspywarestealer

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks