Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
235a58c841820f0f5db279dc3295d727
-
Size
502KB
-
Sample
231231-b8s1qabac6
-
MD5
235a58c841820f0f5db279dc3295d727
-
SHA1
720864edb7b23bdb2c91202a0d5b050173e6b63d
-
SHA256
2582050d304d67e4d56ce15ca6f7376766875fb2e0bd7d655c1e6406d5204b6e
-
SHA512
77bf49f4ffb3a4dd7ef71bcf6f8c0ec59f1eeee25ffd0d8dd4bd4287674827a1720ace0ac044de80351a2cfe98bf1bbe37e51b532b6a5283eeaaa47e5e7c282f
-
SSDEEP
6144:HU89BqrGPBcwqh3SBN9JxJRRAqAgEDQs+BKvTftCpki1szFFullxln:HPOGPOELJ73AqPeXTcCZzFFull
Static task
static1
Behavioral task
behavioral1
Sample
235a58c841820f0f5db279dc3295d727.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
235a58c841820f0f5db279dc3295d727.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
warzonerat
185.157.161.69:9494
Targets
-
-
Target
235a58c841820f0f5db279dc3295d727
-
Size
502KB
-
MD5
235a58c841820f0f5db279dc3295d727
-
SHA1
720864edb7b23bdb2c91202a0d5b050173e6b63d
-
SHA256
2582050d304d67e4d56ce15ca6f7376766875fb2e0bd7d655c1e6406d5204b6e
-
SHA512
77bf49f4ffb3a4dd7ef71bcf6f8c0ec59f1eeee25ffd0d8dd4bd4287674827a1720ace0ac044de80351a2cfe98bf1bbe37e51b532b6a5283eeaaa47e5e7c282f
-
SSDEEP
6144:HU89BqrGPBcwqh3SBN9JxJRRAqAgEDQs+BKvTftCpki1szFFullxln:HPOGPOELJ73AqPeXTcCZzFFull
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-
Suspicious use of SetThreadContext
-