Extracted

• • Target

    4683903d41b7091586fb2cf1737dc916

  • Size

    1.4MB

  • MD5

    4683903d41b7091586fb2cf1737dc916

  • SHA1

    a622afe5c6596f9ffd72d6ce838e704833b9c3dc

  • SHA256

    995253676a48f849d9f6c5c8e23a612a4aed9fbb3526e9b15894e9397e25fb69

  • SHA512

    ef148eaf6fefb97302bee9fd82aadeeb0e42c616eadae02a3da6dbffecde11d1a41959d38c014e40846d26c64c3820c626bf4df34522db110dfce87ef2c654e0

  • SSDEEP

    24576:oUzUqL1Ez1PWJEYd3lul0+OzaAscp+CPdLN81JOJ6ban+k:oUwqL1Ez1PKEYd3lMCrlLN8L65nV

  Score

  10^/10

  warzoneratinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2