Overview

overview

10

Static

static

10

6f00f39f32...f7.exe

windows7-x64

10

6f00f39f32...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    736144e3fddcbfd58aa6f58d1c3ec143b1ba08d3a8e614bf6df447352097f931

  • Size

    74KB

  • Sample

    240417-p23hgafh26

  • MD5

    0a41cec941b99a264a22a8779a788a38

  • SHA1

    cb85342e0130e990e03804d223fcaf7d5813b0fd

  • SHA256

    736144e3fddcbfd58aa6f58d1c3ec143b1ba08d3a8e614bf6df447352097f931

  • SHA512

    84cac427034cb9a24b4f4602c60dc8acf90e78159491084782227dad6b8690972f22ca0bda6272ebc6e7c489e87c4cb5aa6b4adef715304f82e34bd45ebd9501

  • SSDEEP

    1536:jTh799v82kcPNKvMWHsRyPSM4c4OUjFmKsrTz/cdmNVaHmVmlJYOUaJalIl:jf9v82TNKvLPSE4OKsKk3cAiVlJIp6

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wrzn.duckdns.org:45560

Targets

    • Target

      6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7.exe

    • Size

      141KB

    • MD5

      f162051a9bbf0654b6e528b601b048b5

    • SHA1

      19af80d9fb075026bacc9a56aae68d84b36cc123

    • SHA256

      6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7

    • SHA512

      b75fcc6dd1e38bf4810565a055448ae97c882addb19bd272ef1f9a0171588bfdd56459da391968e724af98457905a09a0aa85776eb6d129129fc39355f93df60

    • SSDEEP

      3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwjw:2dx3wqz3ZcDeDKYzqG01wjw

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks