General
- Target 8331.exe
- Size 141KB
- Sample230701-prrm8agg74
- SHA256 c522c8ec25a1719e1063f29c749a69a75fdb7e576c9f0e9b25ee5609dc2ec46a
- MD5 d709d75ec3eea77f82e97761ee46669c
- SHA1 05301829945ae854b0102a357997467646d7bfe5
- SHA512 f6f64dce0c6675910961d5eab9104e7bcb32c4ebc49c1168c7f716c45eb6e433575736973febbf62a8c2ed86d31b123e8fc2ec17b49e7633dc868595410a7bea
- SSDEEP 3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
8331.exe
Resource
win7-20230621-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
8331.exe
Resource
win10v2004-20230621-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
warzonerat
C2
-
wrzone-srvr-connector-port.windows-updates.co:8331
Targets
-
- Target 8331.exe
- Size 141KB
- SHA256 c522c8ec25a1719e1063f29c749a69a75fdb7e576c9f0e9b25ee5609dc2ec46a
- MD5 d709d75ec3eea77f82e97761ee46669c
- SHA1 05301829945ae854b0102a357997467646d7bfe5
- SHA512 f6f64dce0c6675910961d5eab9104e7bcb32c4ebc49c1168c7f716c45eb6e433575736973febbf62a8c2ed86d31b123e8fc2ec17b49e7633dc868595410a7bea
- SSDEEP 3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.