Overview

overview

10

Static

static

10

1712-54-0x...ry.dll

windows7-x64

1

1712-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1712-54-0x0000000001E30000-0x0000000001F8C000-memory.dmp

  • Size

    1.4MB

  • MD5

    7e648c17fbe685e78f7fdf2dfdde72e9

  • SHA1

    e89a66ee9eb62a4fa9ca194b6cbde54af133c61f

  • SHA256

    096f8e37f8f784906b5584b482ce359a95c8449494ddc32687d3ff356c224a47

  • SHA512

    50428362b319cd741df972d37880ed0a68a50561575ed7bbac0514827f525f1abc47e3ff9ca147ab42490671fe396befd342e51d84cbc0f2c1ca94208d71b848

  • SSDEEP

    3072:yO1XHO2Z2/4QGfmkqiUMQwVnmvE4loCYzH5MxgGTKIw:ysh84QGfyDMgE4loCYznGTVw

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

107.172.81.23:6532

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1712-54-0x0000000001E30000-0x0000000001F8C000-memory.dmp
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections