Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

accfe27eb3...d1.exe

windows7-x64

10

accfe27eb3...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    accfe27eb390b4e050cb0fdb3c5033d1

  • Size

    427KB

  • Sample

    240228-zh3n8sde53

  • MD5

    accfe27eb390b4e050cb0fdb3c5033d1

  • SHA1

    97ec772f393f1fb470218766c35ef13607987b6c

  • SHA256

    9f2b005f15ac853198688819b7fe501ee0fd091b862909689e77f37d9b0cccd9

  • SHA512

    a4a1c36426b88dcfcc92c272e68de3a92fe1124f751cc6815b306d5dfec4c8e6e45f6764bb317149dba19f14959eb808a5c61ee3bf4028cdcf33ce8714508100

  • SSDEEP

    12288:ld53TvpHeIl0nh4Yl09G+LslECRD5NViOf:ld53TvpHeIl0nv09G1TzT/

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

178.170.138.163:4554

Targets

    • Target

      accfe27eb390b4e050cb0fdb3c5033d1

    • Size

      427KB

    • MD5

      accfe27eb390b4e050cb0fdb3c5033d1

    • SHA1

      97ec772f393f1fb470218766c35ef13607987b6c

    • SHA256

      9f2b005f15ac853198688819b7fe501ee0fd091b862909689e77f37d9b0cccd9

    • SHA512

      a4a1c36426b88dcfcc92c272e68de3a92fe1124f751cc6815b306d5dfec4c8e6e45f6764bb317149dba19f14959eb808a5c61ee3bf4028cdcf33ce8714508100

    • SSDEEP

      12288:ld53TvpHeIl0nh4Yl09G+LslECRD5NViOf:ld53TvpHeIl0nv09G1TzT/

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzone RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks