Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

03b46784a6...51.exe

windows7-x64

10

03b46784a6...51.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03b46784a632b3cda01529d51.exe

  • Size

    141KB

  • Sample

    230709-xpvabsfa64

  • MD5

    03b46784a632b3cda01529d51b2d02ee

  • SHA1

    5867f96897ae698cba7a3e036d941c326b13828b

  • SHA256

    9099766ebbda92be531e23f08e65ad96419ec985bed21b2ccab80bbfb0e26015

  • SHA512

    5f97f01754f5a6f00fb857de5eadd73a38ef21eca0987a104c5c533949744d67a48eaa5c3cbd455d6aa3eac8365c0d7f7b445b3733f82d236ffc7e72799841d6

  • SSDEEP

    3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

smsv4.ufcfan.org:5200

Targets

    • Target

      03b46784a632b3cda01529d51.exe

    • Size

      141KB

    • MD5

      03b46784a632b3cda01529d51b2d02ee

    • SHA1

      5867f96897ae698cba7a3e036d941c326b13828b

    • SHA256

      9099766ebbda92be531e23f08e65ad96419ec985bed21b2ccab80bbfb0e26015

    • SHA512

      5f97f01754f5a6f00fb857de5eadd73a38ef21eca0987a104c5c533949744d67a48eaa5c3cbd455d6aa3eac8365c0d7f7b445b3733f82d236ffc7e72799841d6

    • SSDEEP

      3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks