Extracted

• • Target

    26580b02825235c11789df19e4c989ed

  • Size

    338KB

  • MD5

    26580b02825235c11789df19e4c989ed

  • SHA1

    f44ed66c791c34c8b53b231050af6d0bdd75b1f8

  • SHA256

    a62f162bb5c1b694e414d1da281b09e37ec87e7835ef6c72ce909bee39b29a39

  • SHA512

    c3af5bae6a2e116e52401f05fac3f6de40e131543fa44aaeb6f36a87d8cb5241a92d8a0b20188b7780843cf316b44d253bb5864d8d68a6e8823e3f974f855ade

  • SSDEEP

    6144:FIMLiqy54VEdd+bsnVEwp6AyHbgif0er3xErA8aB0i4H:FIPqyYI+b54Pif0NaB

  Score

  10^/10

  warzoneratzgratinfostealerrat

  • Detect ZGRat V1

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2