Extracted

• • Target
    ba3d2569f715cba001a95907847740c5
  • Size 152KB
  • SHA256 469301f8da3a3ddf892007d92eb5df11810dc36dd9487014073ac49f4bdb70e5
  • MD5 ba3d2569f715cba001a95907847740c5
  • SHA1 6110a97db563b5044e38f45fc420ae5669b8ba9c
  • SHA512 e0fe62a76ba3c111d11f209ddfdfdf5650a6d4d797791d48f1f4b6db2193d676e207591c97e95d9e0ba2d77460f2286abe99c93fe0a98761629fac30f7a2b751
  • SSDEEP 3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:4NLYdT97JSIFl0QENqF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  warzoneratinfostealerrattrojan

  • Detects BazaLoader malware

    BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests.

    trojan

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2