General
-
Target
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2_JC.exe
-
Size
132KB
-
Sample
231010-vvnnmagg44
-
MD5
4e580606cc9eb47f724a37fa602a38d8
-
SHA1
257e647fdb76e23fcff141786724375571497945
-
SHA256
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2
-
SHA512
f8cfa209afaac6a7a141cccfad9e34be45155e27c9fe7b3a86e1f1a83e0b7f3587e670b3a6016ec366d5c3bbfd3af428c9532e9193c29750bf6f0ca20efcb341
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Behavioral task
behavioral1
Sample
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
warzonerat
127.0.0.1:5200
Targets
-
-
Target
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2_JC.exe
-
Size
132KB
-
MD5
4e580606cc9eb47f724a37fa602a38d8
-
SHA1
257e647fdb76e23fcff141786724375571497945
-
SHA256
11e71bf9d7e319b9d2dd256e568192d866e75e78062404110d8f55e1bbfcbec2
-
SHA512
f8cfa209afaac6a7a141cccfad9e34be45155e27c9fe7b3a86e1f1a83e0b7f3587e670b3a6016ec366d5c3bbfd3af428c9532e9193c29750bf6f0ca20efcb341
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-