warzonerat | 6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
05/04/2024, 13:55

Target
171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe
Size 141KB
Sample240405-q75epadg71
SHA256 6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7
MD5 f162051a9bbf0654b6e528b601b048b5
SHA1 19af80d9fb075026bacc9a56aae68d84b36cc123
SHA512 b75fcc6dd1e38bf4810565a055448ae97c882addb19bd272ef1f9a0171588bfdd56459da391968e724af98457905a09a0aa85776eb6d129129fc39355f93df60
SSDEEP 3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwjw:2dx3wqz3ZcDeDKYzqG01wjw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
rat infostealer warzonerat

C:\Users\Admin\AppData\Local\Temp\171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\171232524697e35246a2c30a489356b87d3c5303ea4c887116c0c70f131b7f9e7ded60e56c137.dat-decoded.exe"
1⤵
PID:2748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4888 --field-trial-handle=2292,i,2927097380497635931,2014459809064723663,262144 --variations-seed-version /prefetch:8
1⤵
PID:1144