Overview

overview

10

Static

static

10

4328-9-0x0...ry.exe

windows7-x64

4328-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4328-9-0x0000000005150000-0x00000000052AC000-memory.dmp

  • Size

    1.4MB

  • MD5

    28f3555541184b23f6fedc81999af373

  • SHA1

    fc7c8c5a82838d84c8ae779913aef616e2522241

  • SHA256

    0df67e89b4ca5c86712d270ae0fddc18bb763add137e312573e8ef48caeb95f5

  • SHA512

    cda45b60058f7a990910d0562fa82bd0b129f5a376bdd01e58a7261d0335c034c80813c4ee70458a2db0215c0abc3fd0a2a98a47b3bb61cb4eb9e72fd98877ac

  • SSDEEP

    3072:MgVgOjuOgN9NenC97PjS51Ym7Ou3VYFcnYzHCG0iIwj:M/HgnC9DjSZmF8YziG0Nwj

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

bestsuccess.ddns.net:3443

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4328-9-0x0000000005150000-0x00000000052AC000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections