Overview

overview

10

Static

static

10

85454397f6...22.exe

windows7-x64

10

85454397f6...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85454397f62644882f6896807d483b5f9c1f4490d893158475dbc21ea3ba4522

  • Size

    98KB

  • Sample

    240524-aak2saea6y

  • MD5

    4dc0c31f2972187a8813e4c88e7b2f26

  • SHA1

    360c5e3d8458e4678b413e238c08a3364a8d0b6d

  • SHA256

    85454397f62644882f6896807d483b5f9c1f4490d893158475dbc21ea3ba4522

  • SHA512

    ab459c2f7ed8f0add264506e8f512ab6b400afe8dda12e7b0bae1c759df062ee3372fd502b8c5e40d9d4fb4c426bdd6d0cdece3e08434441ef29bf8ab46ac9c1

  • SSDEEP

    1536:7CsqDw2ost58PNkDtPMpcJBO9Yc2F11jVEyP:mpjZ+cJBSYNdjVEo

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      85454397f62644882f6896807d483b5f9c1f4490d893158475dbc21ea3ba4522

    • Size

      98KB

    • MD5

      4dc0c31f2972187a8813e4c88e7b2f26

    • SHA1

      360c5e3d8458e4678b413e238c08a3364a8d0b6d

    • SHA256

      85454397f62644882f6896807d483b5f9c1f4490d893158475dbc21ea3ba4522

    • SHA512

      ab459c2f7ed8f0add264506e8f512ab6b400afe8dda12e7b0bae1c759df062ee3372fd502b8c5e40d9d4fb4c426bdd6d0cdece3e08434441ef29bf8ab46ac9c1

    • SSDEEP

      1536:7CsqDw2ost58PNkDtPMpcJBO9Yc2F11jVEyP:mpjZ+cJBSYNdjVEo

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks