Overview

overview

10

Static

static

10

Server.exe

windows7-x64

10

Server.exe

windows10-1703-x64

10

Server.exe

windows10-2004-x64

10

Server.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Server.exe

  • Size

    132KB

  • MD5

    70cac1d5f3bca89d948821f6c2b51bf7

  • SHA1

    86f8c769a840e902c0f7073943d2c0506e5c6c15

  • SHA256

    6898a4a5134e3da33a28477ce504ef8385021d2200080573e85e5ea332724d0e

  • SHA512

    e8e13f252fe72635de37c45b5a6a1a0dbed5bddcded64ad1dd5f47b94ec08a080adccf61203b20fa3922c0ac15b2d1063c6e767a4cb13154704c7f7c7f44fa69

  • SSDEEP

    3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

tonnersturma-31352.portmap.host:31352

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows:6 windows x86 arch:x86

    56fc94e02d7bc310030753938e49a91a


    Headers

    Imports

    Sections