Extracted

• • Target

    d129815677ebe39b7bc1d5cab436d3215fc9ade83306bf9d7ba9c48a509dba22

  • Size

    2.8MB

  • MD5

    49246106665fa0fc369af394866827e3

  • SHA1

    5e1fe81b007e03bb3a1b452e0cee53c87acafcf6

  • SHA256

    d129815677ebe39b7bc1d5cab436d3215fc9ade83306bf9d7ba9c48a509dba22

  • SHA512

    6b88ed92d28ea919ead1555c5edd040c74beafd52eae4caaa657f0f54ced97f6af448a68d5b51c5292697da8d543695447a4a0192014a4b4fdeae99550498497

  • SSDEEP

    24576:R5RIyPhqQyjggWCghPaRoK/dq1mbexUjdrbdMM5696lGcl6tdqIGcEVM4b:R53PYXMgpCaRo4ngsdrbdMLQLw

  Score

  10^/10

  warzoneratinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2