Extracted

• • Target

    0x000700000001b02f-13.dat

  • Size

    141KB

  • MD5

    8924c729f5b74dce861ebbe8170c1e24

  • SHA1

    996451edb9e8b09a9f126107413c22d071ceb635

  • SHA256

    56fc109c624733be74c8222cf04b939537455c3c0c41401878d385a49a698314

  • SHA512

    242142e1fd729e8bf1e2e396b185e7eefcca8ea94d023698fa4b6b49a5b585d29c9a9e3cee23ac62e1d196493f500f0a999d1c2e95b63dc184b74a77732e5936

  • SSDEEP

    3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2