Extracted

• • Target
    Video of our company specification details-PD.exe
  • Size 702KB
  • SHA256 e360dcf6f40f9eb2ae5ceb98825ca3c8942fe935463594cfcf9c29ccd7f28707
  • MD5 4bdda5eb7eb63d9db47ccc313fab0005
  • SHA1 78a870be0801f05089947dfad4cc4248e0413a1a
  • SHA512 c460c229067fb134ec74a534d96b10c8df7b3f3f0a0e83a6459ddbc820ecd82437987cd3558a42fc0a09c3a5b33f33c0e1d547cd8a76c0fa5197f09e29f237c6
  • SSDEEP 12288:ygWJp09rIJA9E3uHdB7ARBaIlsZAu1yR61knbKQt:ygF9hquHjUR4Ils2ZHnDt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  warzoneratinfostealerratspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2