Overview

overview

10

Static

static

10

1960-54-0x...ry.dll

windows7-x64

1

1960-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1960-54-0x0000000002170000-0x00000000022CC000-memory.dmp

  • Size

    1.4MB

  • MD5

    527987ce8853614df4084f2f7592fdfe

  • SHA1

    b0a61b6c7f56c149b1cec688c044609beeb0d9ab

  • SHA256

    cbb27ffeeb69cd2a4413d3a5f9f3ef84550116be82105f0266964929b47dabdf

  • SHA512

    53034b62e74e020ededdd95211c55801b628312c49cbc8a770a4cdae91cf8e1c4e8be505234ed1ebfc8f21843a58d238f8fc70af951025b96adc34f3bed50097

  • SSDEEP

    3072:xojZPOD5dtoYT1knambl9wuUFFMek+mMwYzHlxgGTXIw:xCQ5dZT1kn7T+mLYzMGT4w

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

172.94.88.130:2030

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1960-54-0x0000000002170000-0x00000000022CC000-memory.dmp
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections