Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

235a58c841...27.exe

windows7-x64

10

235a58c841...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    235a58c841820f0f5db279dc3295d727

  • Size

    502KB

  • Sample

    231231-b8s1qabac6

  • MD5

    235a58c841820f0f5db279dc3295d727

  • SHA1

    720864edb7b23bdb2c91202a0d5b050173e6b63d

  • SHA256

    2582050d304d67e4d56ce15ca6f7376766875fb2e0bd7d655c1e6406d5204b6e

  • SHA512

    77bf49f4ffb3a4dd7ef71bcf6f8c0ec59f1eeee25ffd0d8dd4bd4287674827a1720ace0ac044de80351a2cfe98bf1bbe37e51b532b6a5283eeaaa47e5e7c282f

  • SSDEEP

    6144:HU89BqrGPBcwqh3SBN9JxJRRAqAgEDQs+BKvTftCpki1szFFullxln:HPOGPOELJ73AqPeXTcCZzFFull

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

185.157.161.69:9494

Targets

    • Target

      235a58c841820f0f5db279dc3295d727

    • Size

      502KB

    • MD5

      235a58c841820f0f5db279dc3295d727

    • SHA1

      720864edb7b23bdb2c91202a0d5b050173e6b63d

    • SHA256

      2582050d304d67e4d56ce15ca6f7376766875fb2e0bd7d655c1e6406d5204b6e

    • SHA512

      77bf49f4ffb3a4dd7ef71bcf6f8c0ec59f1eeee25ffd0d8dd4bd4287674827a1720ace0ac044de80351a2cfe98bf1bbe37e51b532b6a5283eeaaa47e5e7c282f

    • SSDEEP

      6144:HU89BqrGPBcwqh3SBN9JxJRRAqAgEDQs+BKvTftCpki1szFFullxln:HPOGPOELJ73AqPeXTcCZzFFull

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzone RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks