General
-
Target
tmp
-
Size
132KB
-
Sample
230605-qgxl6ahd3v
-
MD5
7e7db52be84969dad2a85c921c784924
-
SHA1
f6e398feafb8a79d76598e15d6ff93f0b2aa1050
-
SHA256
f506645bf1fee80214a7c8f45516f23e0c6b066c200da796d8f68dd55258ffe6
-
SHA512
35b2eb055c7f3e258aca21b2ea7ab337138272e860a69db258d26ef7474bf456ec3040dabcfd9f54bde2b0894f41d4418ffb1f899fd7a90f64ad50116f7283a9
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
warzonerat
95.214.27.90:1337
Targets
-
-
Target
tmp
-
Size
132KB
-
MD5
7e7db52be84969dad2a85c921c784924
-
SHA1
f6e398feafb8a79d76598e15d6ff93f0b2aa1050
-
SHA256
f506645bf1fee80214a7c8f45516f23e0c6b066c200da796d8f68dd55258ffe6
-
SHA512
35b2eb055c7f3e258aca21b2ea7ab337138272e860a69db258d26ef7474bf456ec3040dabcfd9f54bde2b0894f41d4418ffb1f899fd7a90f64ad50116f7283a9
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-