Overview

overview

10

Static

static

10

7cfc2d05d5...71.exe

windows7-x64

10

7cfc2d05d5...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671

  • Size

    98KB

  • Sample

    240523-3l1ktsde68

  • MD5

    895786e9127e814d0ae54fa5e061e6c7

  • SHA1

    70887de46346c98f1afd967b7371d360bb60f6ec

  • SHA256

    7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671

  • SHA512

    add3b6c595089722bd856b50b4736f09ad4777064781ea3bf1861fc5b0c8762b7f2c5639b184fd7987a007ca4514c91ad3f3b5d6c2a5fc1e5e797363cb743cc3

  • SSDEEP

    1536:7CsqDw2ost58PNkDtPMpcJBO9YcQF11jVEye:mpjZ+cJBSYLdjVER

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671

    • Size

      98KB

    • MD5

      895786e9127e814d0ae54fa5e061e6c7

    • SHA1

      70887de46346c98f1afd967b7371d360bb60f6ec

    • SHA256

      7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671

    • SHA512

      add3b6c595089722bd856b50b4736f09ad4777064781ea3bf1861fc5b0c8762b7f2c5639b184fd7987a007ca4514c91ad3f3b5d6c2a5fc1e5e797363cb743cc3

    • SSDEEP

      1536:7CsqDw2ost58PNkDtPMpcJBO9YcQF11jVEye:mpjZ+cJBSYLdjVER

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks