Extracted

• • Target

    INV0027378237.exe

  • Size

    548KB

  • MD5

    ed4f82afe19ba8e6ccc5337fd8bf25cb

  • SHA1

    2e6bda29c0d1bb672bd7c1508bd0d63638b70c7d

  • SHA256

    0927b45cef21ee3f1781b233bb5ce216c203aea0f827679e19461097e5606009

  • SHA512

    6e434abf6f5601fcf075d97182f2b2f06d2b50ca1fb5a1736d0d0d06a62677307ee08094e8153ee2204ea780e0e6bd3e873861ba61d2596a8bf544049765bc3c

  • SSDEEP

    12288:qr6JoOoA0Aw0Rlmn3u3GcbjP5wkITgJdb8Sssr9JeB7T:qOaObJeu2cXP6kITgV13eB3

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2