Overview

overview

10

Static

static

3

51fc3d3651...18.exe

windows7-x64

10

51fc3d3651...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51fc3d3651f0857306f99755ab0b87f5_JaffaCakes118

  • Size

    456KB

  • Sample

    240517-29cy1agb71

  • MD5

    51fc3d3651f0857306f99755ab0b87f5

  • SHA1

    8c3a319fce0334ab3449b2fe974d0adec258d017

  • SHA256

    a8274f99060b79855182389dbc010ed1f96df74191b4a85342dc88897fdb1cac

  • SHA512

    f7722b7f1040aa9e90e17fc45788722f766fda814a35fd4b8d48f38361b0ebe7c387a9e98bb9fd9d960910235233cb34627383e6dc290bb07f367773fcf14a34

  • SSDEEP

    6144:C0B6P8pYbsIkHsqTr2lHUTsg2OvZXhiUlS/S/adb++QlO4QNyZg2pPVwtU0dKaX:C0BdYgIkMIOY9NlS/8+QCyVPVotdp

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

43030warzone.warzonedns.com:43030

Targets

    • Target

      51fc3d3651f0857306f99755ab0b87f5_JaffaCakes118

    • Size

      456KB

    • MD5

      51fc3d3651f0857306f99755ab0b87f5

    • SHA1

      8c3a319fce0334ab3449b2fe974d0adec258d017

    • SHA256

      a8274f99060b79855182389dbc010ed1f96df74191b4a85342dc88897fdb1cac

    • SHA512

      f7722b7f1040aa9e90e17fc45788722f766fda814a35fd4b8d48f38361b0ebe7c387a9e98bb9fd9d960910235233cb34627383e6dc290bb07f367773fcf14a34

    • SSDEEP

      6144:C0B6P8pYbsIkHsqTr2lHUTsg2OvZXhiUlS/S/adb++QlO4QNyZg2pPVwtU0dKaX:C0BdYgIkMIOY9NlS/8+QCyVPVotdp

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzone RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks