General

  • Target

    3368-151-0x0000000000400000-0x000000000055C000-memory.dmp

  • Size

    1.4MB

  • MD5

    9a922d50d93f48a691f31a349970f8a4

  • SHA1

    16c5d18b494a75c2e67282c9cf1fab3c4fd719d6

  • SHA256

    8caa30a6a50c263ab78951dbe976a56067ec150367abdb31bbbc7131f37ef662

  • SHA512

    df30985567bc72c54ce359e6f7d3084a0ef1c0e5bcc76b8532862e9595572b580da16b56c88dada7c92b23c5b72ee6a1fbc53a81ff89cb3a335f3c72027034c2

  • SSDEEP

    3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

45.81.39.33:5300

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3368-151-0x0000000000400000-0x000000000055C000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections