Extracted

• • Target

    c6d715757297e68e8c898b5c2c11e95883d17d428b13bd9318ea7122aee8c034

  • Size

    239KB

  • MD5

    120d685f89e2953d1ef59a28f3d5b464

  • SHA1

    a9d6db9ab0c92ab1463b250290aa68ab740943aa

  • SHA256

    c6d715757297e68e8c898b5c2c11e95883d17d428b13bd9318ea7122aee8c034

  • SHA512

    2723fef5e2be4dce0ae1f0dcdbcadb1d5bc507e4f90d07b1728ceb203da26fd7cb26c31cc1b3a9db4e499db1e25edf3847db00b00ae7de8bba6f1110f6fb0d47

  • SSDEEP

    6144:bp/8sJ3Psr6CQ5d/90RpEGUvHYIGbdrKW6kCmn4:hJ3KbudSRp0PxGu

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2