General
-
Target
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671
-
Size
98KB
-
Sample
240523-3l1ktsde68
-
MD5
895786e9127e814d0ae54fa5e061e6c7
-
SHA1
70887de46346c98f1afd967b7371d360bb60f6ec
-
SHA256
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671
-
SHA512
add3b6c595089722bd856b50b4736f09ad4777064781ea3bf1861fc5b0c8762b7f2c5639b184fd7987a007ca4514c91ad3f3b5d6c2a5fc1e5e797363cb743cc3
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcQF11jVEye:mpjZ+cJBSYLdjVER
Behavioral task
behavioral1
Sample
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671
-
Size
98KB
-
MD5
895786e9127e814d0ae54fa5e061e6c7
-
SHA1
70887de46346c98f1afd967b7371d360bb60f6ec
-
SHA256
7cfc2d05d5380460ef7e67d79b2a7f29b2a9bec27adc6e8c55bf3480dc221671
-
SHA512
add3b6c595089722bd856b50b4736f09ad4777064781ea3bf1861fc5b0c8762b7f2c5639b184fd7987a007ca4514c91ad3f3b5d6c2a5fc1e5e797363cb743cc3
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcQF11jVEye:mpjZ+cJBSYLdjVER
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-