Overview

overview

10

Static

static

10

67c0da96b0...0a.exe

windows7-x64

10

67c0da96b0...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67c0da96b012c038dc23821ced5f7782bfb1dec07f141b57663b3292e1f0310a

  • Size

    98KB

  • Sample

    240523-2j8mzsbf94

  • MD5

    54e04400aa9962971144bf93df00d773

  • SHA1

    9a189fdc4175a1a72b4e408036372eb006323a40

  • SHA256

    67c0da96b012c038dc23821ced5f7782bfb1dec07f141b57663b3292e1f0310a

  • SHA512

    bd76f92829cbf900bcab5f7bd05870322158fd00711b314f67a9d63ee90b6adc8af1010898e3728025ed5d2361a1cd77ec276cc141c6b7b4f0af77a7049ef3b6

  • SSDEEP

    1536:b60eDNKgTAgkw+BMrtU4FxW5Ake5is1jVEyM:Ol3ThS4FxeAxRjVED

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      67c0da96b012c038dc23821ced5f7782bfb1dec07f141b57663b3292e1f0310a

    • Size

      98KB

    • MD5

      54e04400aa9962971144bf93df00d773

    • SHA1

      9a189fdc4175a1a72b4e408036372eb006323a40

    • SHA256

      67c0da96b012c038dc23821ced5f7782bfb1dec07f141b57663b3292e1f0310a

    • SHA512

      bd76f92829cbf900bcab5f7bd05870322158fd00711b314f67a9d63ee90b6adc8af1010898e3728025ed5d2361a1cd77ec276cc141c6b7b4f0af77a7049ef3b6

    • SSDEEP

      1536:b60eDNKgTAgkw+BMrtU4FxW5Ake5is1jVEyM:Ol3ThS4FxeAxRjVED

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks