Overview

overview

10

Static

static

10

6ded206847...40.exe

windows7-x64

10

6ded206847...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ded206847b09330018b1b9fe6573c884a171d7eccf29fbec1d8487ca9290540

  • Size

    98KB

  • Sample

    240524-211zgaee99

  • MD5

    374be9005910d4cf5554a2653b8cefc6

  • SHA1

    73f60dde6779a4dd08660715183d76d1bf7dd1a1

  • SHA256

    6ded206847b09330018b1b9fe6573c884a171d7eccf29fbec1d8487ca9290540

  • SHA512

    3806f0f8ae055883f389ca7911d68d3ed84142859ea26f69eda748972ce2722ea70c91997f95174a5947e7ec1b8bbcbf130b512454929b4b28ee5b04815e6af5

  • SSDEEP

    1536:b60eDNKgTAgkw+BMrtU4FxW5Akcg5is1jVEym:Ol3ThS4FxeAiRjVE1

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      6ded206847b09330018b1b9fe6573c884a171d7eccf29fbec1d8487ca9290540

    • Size

      98KB

    • MD5

      374be9005910d4cf5554a2653b8cefc6

    • SHA1

      73f60dde6779a4dd08660715183d76d1bf7dd1a1

    • SHA256

      6ded206847b09330018b1b9fe6573c884a171d7eccf29fbec1d8487ca9290540

    • SHA512

      3806f0f8ae055883f389ca7911d68d3ed84142859ea26f69eda748972ce2722ea70c91997f95174a5947e7ec1b8bbcbf130b512454929b4b28ee5b04815e6af5

    • SSDEEP

      1536:b60eDNKgTAgkw+BMrtU4FxW5Akcg5is1jVEym:Ol3ThS4FxeAiRjVE1

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks