Overview

overview

10

Static

static

10

1788-54-0x...ry.dll

windows7-x64

1

1788-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1788-54-0x0000000002900000-0x0000000002A5D000-memory.dmp

  • Size

    1.4MB

  • MD5

    74e6e33fb301c771fb20270d4e4561e9

  • SHA1

    f3c03244232a359ce410c2604493ea79201f4581

  • SHA256

    efca7c285b5c7dc79e249bb74a9ce298be7b0316d97a5425b56001fdb5beedb5

  • SHA512

    747d0fbd56c8f3782f01e900cc937a6cb88d7ee35b10eb27802f7b3704cce415672c3c2bb3b50f3075aa90e31ded79e325573ec05283319fa080f04fc2b5d644

  • SSDEEP

    3072:ZGcMwWEOsHOpInCBor9u1uTp3YVtYGZAUOz3DVBSYzHYG08Iw:ZXPupzog1uMcz3DVBSYz4G0zw

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

190.2.142.239:5566

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1788-54-0x0000000002900000-0x0000000002A5D000-memory.dmp
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections