General

  • Target

    2332-6-0x0000000000400000-0x0000000000554000-memory.dmp

  • Size

    1.3MB

  • MD5

    324a42d239ad03ca72de045504ccc8c5

  • SHA1

    e4f939a6fae4ae4b12fb3565fcd50e9b23f37ef8

  • SHA256

    97dd77cfde4c441ff18d9b404711019898f8efbadbce617c0c99e771b5c3ef63

  • SHA512

    c91b5ce5622e4921cb66c715510b85d197e0f575a662604f492c758781ca90f4cbe2ca78e8afc451997c856ce6fe15c23b1643ac29c7c7e484c2cfcc6e1a23e5

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

boldwold.home.kg:5208

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2332-6-0x0000000000400000-0x0000000000554000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections