Overview

overview

10

Static

static

10

4268-149-0...ry.exe

windows7-x64

4268-149-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4268-149-0x0000000005350000-0x00000000054B8000-memory.dmp

  • Size

    1.4MB

  • MD5

    6d921f720575c173ecf616faf468f90f

  • SHA1

    a20c372fea70e45151f25d2c3209f5f6acda2e7b

  • SHA256

    00e5642ba6b0db88e25015389611c855d2a478a6835a41778a6db480e26a8802

  • SHA512

    11028331e247aeea3add66dbf6f1e178e4d6c0a1443c2f08db59bcc09c1bff591319f12442abba70c56c77615617df677401015e9cfc2b051a7a2bc8cdb26672

  • SSDEEP

    3072:g9trzJqnIYNxPtQOpzmkIOV1bnlb6bHtfz+LTph:g9VzJqIYNxPlmpOV1b1wtfz+LT

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

donelpacino.ddns.net:4545

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4268-149-0x0000000005350000-0x00000000054B8000-memory.dmp
    .exe windows x86


    Headers

    Sections