Overview

overview

10

Static

static

10

f00ab5404c...6e.exe

windows7-x64

10

f00ab5404c...6e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f00ab5404cb2861855a24c90fa391c7e4b4e9f22839b69f8994111313bf7cf6e

  • Size

    1.2MB

  • MD5

    00317ea3b188e0e7f7e10958ede210f4

  • SHA1

    3a8a40799b9424574f56864c06a6cd67afa9902e

  • SHA256

    f00ab5404cb2861855a24c90fa391c7e4b4e9f22839b69f8994111313bf7cf6e

  • SHA512

    5aec4fc5ebbd9ff93ef8560a9ea5570d5e4c9004ac3f80b06133e5a6c3da824a7215bc48f5e0d75d205ac1b0af31df4ba3139d458f07018d91645ac0f73e5a2b

  • SSDEEP

    12288:OIbsBDU0I6+Tu0TJ0N1oYgNOFDA7W2FeDSIGVH/KIDgDgUeHbY11ks:OIbGD2JTu0GoZQDbGV6eH81ks

Score
10/10
rataspackv2warzonerat

Malware Config

Signatures

  • Detects executables packed with ASPack 1 IoCs
  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f00ab5404cb2861855a24c90fa391c7e4b4e9f22839b69f8994111313bf7cf6e
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections