General

  • Target

    2568-11-0x0000000000400000-0x000000000055C000-memory.dmp

  • Size

    1.4MB

  • MD5

    d2298eed2d10e89a96bee05ad1512d4a

  • SHA1

    263d5774b1b71214291b5b945379e5c0ace8804c

  • SHA256

    36fcd0d55175905c508091c35be99d8a6b9d64ddffc7c37fbd67fc12b60b6cfd

  • SHA512

    9b8d5551fd113e5eea012efec7a6881dd1b88459005cacbad54fb5e0b0ecf0ef37f7e3e845b2f86fc35d8bc116fe1d01beab9af0051d8bd0d88aedca234b8edf

  • SSDEEP

    3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

64.188.20.119:5200

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2568-11-0x0000000000400000-0x000000000055C000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections