Extracted

• • Target

    24d37ca5499591f7ec6f0e8d3861ce10.exe

  • Size

    113KB

  • MD5

    24d37ca5499591f7ec6f0e8d3861ce10

  • SHA1

    708d7c289a8fd9ad66047ae95a4fe9bfb0d17b2f

  • SHA256

    6954548b5da8aaf8acbb65595e8e4bcba34ea699b6de4f66b13c21d7cdbb8cc7

  • SHA512

    0eee463f82c96ccf3d77c9032b13d2cff7c634b9352a5c7ce49b1c5d268cdf7cbf0d7b6b0650bbbbf097170b49ecb36137d305c7e94a684c0879f494b9120e82

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxW8IB4u0OVE01:K1VmhaH8EFvW50OVE0

  Score

  10^/10

  warzoneratinfostealerratspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2