Overview

overview

10

Static

static

10

624-54-0x0...ry.dll

windows7-x64

1

624-54-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    624-54-0x0000000002A30000-0x0000000002B8C000-memory.dmp

  • Size

    1.4MB

  • MD5

    025c868612e5707af3e2aa7fa678c751

  • SHA1

    0f36227cca406ed53114f8a4cc11a738ebfcb76e

  • SHA256

    55dbc4df0e29e6dcd8ff7d91c529f15491aa07285feabd4ffe44c60dbb99a969

  • SHA512

    d68132df561fbeaa8af8b02d773ef27fd27817498bda4ed9735d02d532221df38bd854b056c93f5ab096f559bb7a2ee2a2b17a97e8f7f09baacb16501adc94cd

  • SSDEEP

    3072:dojRfO/tI8/h8nSOBBQyAYOizYzHxxgGTTIw:diMt/h8nDXOizYzAGTMw

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

155.94.150.100:6473

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 624-54-0x0000000002A30000-0x0000000002B8C000-memory.dmp
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections