General
-
Target
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
-
Sample
240224-pxa8esbh48
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Resource
win10-20240214-en
Behavioral task
behavioral4
Sample
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Resource
win11-20240221-en
Malware Config
Extracted
warzonerat
su8z3r0.myvnc.com:9876
Targets
-
-
Target
https://rutube.ru/video/a13eccd706653d911c9bfc7cf470ea2f/
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-
Executes dropped EXE
-
Adds Run key to start application
-