Overview

overview

10

Static

static

10

c8c1880838...f3.exe

windows7-x64

10

c8c1880838...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8c1880838e956c4743c7b5fbb0b735372bd6f09bacb2b275afe030b685d5cf3

  • Size

    98KB

  • Sample

    240524-dqrfaaba9z

  • MD5

    69e1ac07c6a053f962d14fc3c47683bb

  • SHA1

    679963e67fcb7026d814ed1771a918f83ee1058c

  • SHA256

    c8c1880838e956c4743c7b5fbb0b735372bd6f09bacb2b275afe030b685d5cf3

  • SHA512

    12e2d2aed8b3872601a766acd94e70afda16a55e5a5ae31fed28c10d179b4c52e7cd4d31f29af3291220af170805dfdbac0216e3db4b8aeaa1c028fb5450f0e5

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEyv:GxD6jSm0uWRfCoeHFjVEI

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      c8c1880838e956c4743c7b5fbb0b735372bd6f09bacb2b275afe030b685d5cf3

    • Size

      98KB

    • MD5

      69e1ac07c6a053f962d14fc3c47683bb

    • SHA1

      679963e67fcb7026d814ed1771a918f83ee1058c

    • SHA256

      c8c1880838e956c4743c7b5fbb0b735372bd6f09bacb2b275afe030b685d5cf3

    • SHA512

      12e2d2aed8b3872601a766acd94e70afda16a55e5a5ae31fed28c10d179b4c52e7cd4d31f29af3291220af170805dfdbac0216e3db4b8aeaa1c028fb5450f0e5

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEyv:GxD6jSm0uWRfCoeHFjVEI

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks