warzonerat | 6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7

Analysis

max time kernel
147s
max time network
151s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
05/04/2024, 13:55

Target
171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe
Size 141KB
Sample240405-q75epadg71
SHA256 6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7
MD5 f162051a9bbf0654b6e528b601b048b5
SHA1 19af80d9fb075026bacc9a56aae68d84b36cc123
SHA512 b75fcc6dd1e38bf4810565a055448ae97c882addb19bd272ef1f9a0171588bfdd56459da391968e724af98457905a09a0aa85776eb6d129129fc39355f93df60
SSDEEP 3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwjw:2dx3wqz3ZcDeDKYzqG01wjw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
rat infostealer warzonerat

C:\Users\Admin\AppData\Local\Temp\171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe"
1⤵
PID:1660