Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
accfe27eb390b4e050cb0fdb3c5033d1
-
Size
427KB
-
Sample
240228-zh3n8sde53
-
MD5
accfe27eb390b4e050cb0fdb3c5033d1
-
SHA1
97ec772f393f1fb470218766c35ef13607987b6c
-
SHA256
9f2b005f15ac853198688819b7fe501ee0fd091b862909689e77f37d9b0cccd9
-
SHA512
a4a1c36426b88dcfcc92c272e68de3a92fe1124f751cc6815b306d5dfec4c8e6e45f6764bb317149dba19f14959eb808a5c61ee3bf4028cdcf33ce8714508100
-
SSDEEP
12288:ld53TvpHeIl0nh4Yl09G+LslECRD5NViOf:ld53TvpHeIl0nv09G1TzT/
Static task
static1
Behavioral task
behavioral1
Sample
accfe27eb390b4e050cb0fdb3c5033d1.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
accfe27eb390b4e050cb0fdb3c5033d1.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
warzonerat
178.170.138.163:4554
Targets
-
-
Target
accfe27eb390b4e050cb0fdb3c5033d1
-
Size
427KB
-
MD5
accfe27eb390b4e050cb0fdb3c5033d1
-
SHA1
97ec772f393f1fb470218766c35ef13607987b6c
-
SHA256
9f2b005f15ac853198688819b7fe501ee0fd091b862909689e77f37d9b0cccd9
-
SHA512
a4a1c36426b88dcfcc92c272e68de3a92fe1124f751cc6815b306d5dfec4c8e6e45f6764bb317149dba19f14959eb808a5c61ee3bf4028cdcf33ce8714508100
-
SSDEEP
12288:ld53TvpHeIl0nh4Yl09G+LslECRD5NViOf:ld53TvpHeIl0nv09G1TzT/
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-
Suspicious use of SetThreadContext
-