Extracted

• • Target

    GZdD.exe

  • Size

    555KB

  • MD5

    0e5aa77031459c9c48cf2fa298677656

  • SHA1

    441d43e583d891907bc932b1b9adb611e44b6660

  • SHA256

    7814c75c9ddfebea34123a885417c971802505f045ed5c0103a9762b83200656

  • SHA512

    6c737ec37d5b1aa480fa0cd4d732d82fbbdc26db5ffe11ed657d0efcd44149cdd2b351e684f2780065c29cea0d2eb39328019eecc2ab9dd558042b394fd86624

  • SSDEEP

    12288:WApwYWJp0aRZNRx6fk/iBwX6LV2Dviqnb4oaJVkoXfDjobK:WaFINUwiBw/DHnzUXrp

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2