General

  • Target

    736144e3fddcbfd58aa6f58d1c3ec143b1ba08d3a8e614bf6df447352097f931

  • Size

    74KB

  • MD5

    0a41cec941b99a264a22a8779a788a38

  • SHA1

    cb85342e0130e990e03804d223fcaf7d5813b0fd

  • SHA256

    736144e3fddcbfd58aa6f58d1c3ec143b1ba08d3a8e614bf6df447352097f931

  • SHA512

    84cac427034cb9a24b4f4602c60dc8acf90e78159491084782227dad6b8690972f22ca0bda6272ebc6e7c489e87c4cb5aa6b4adef715304f82e34bd45ebd9501

  • SSDEEP

    1536:jTh799v82kcPNKvMWHsRyPSM4c4OUjFmKsrTz/cdmNVaHmVmlJYOUaJalIl:jf9v82TNKvLPSE4OKsKk3cAiVlJIp6

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

wrzn.duckdns.org:45560

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 736144e3fddcbfd58aa6f58d1c3ec143b1ba08d3a8e614bf6df447352097f931
    .zip

    Password: infected

  • 6f00f39f32bb3556f024b6e877337a8e6ba5a2feda5d1187e85684de23471ff7.exe
    .exe windows:6 windows x86 arch:x86

    0145d2c473bdbcd7b46a054bd6893ec4


    Headers

    Imports

    Sections