Overview

overview

10

Static

static

10

e99022fe1e...b0.exe

windows7-x64

10

e99022fe1e...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e99022fe1eebef4b041422f3c3ef2d2a5cb80bcdb6b5e82370e19a0048de03b0

  • Size

    98KB

  • Sample

    240524-ffqgcadh89

  • MD5

    2d26a7a1ffed4ebe63fb54ad98c9d8fb

  • SHA1

    340057c2b082396eece65351b47c94ab2432f945

  • SHA256

    e99022fe1eebef4b041422f3c3ef2d2a5cb80bcdb6b5e82370e19a0048de03b0

  • SHA512

    5dea44899cbc43028b56b0b0c3ba6f2ebe91c281ae65a9f49a1d7f02b0615fe04f921558033aa757665f37650ab1ffce5ba46506764e39a3a15dfa5d7ee813f0

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/elocVE9F1jVEym:GxD6jSm0uWRfCohFjVEl

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      e99022fe1eebef4b041422f3c3ef2d2a5cb80bcdb6b5e82370e19a0048de03b0

    • Size

      98KB

    • MD5

      2d26a7a1ffed4ebe63fb54ad98c9d8fb

    • SHA1

      340057c2b082396eece65351b47c94ab2432f945

    • SHA256

      e99022fe1eebef4b041422f3c3ef2d2a5cb80bcdb6b5e82370e19a0048de03b0

    • SHA512

      5dea44899cbc43028b56b0b0c3ba6f2ebe91c281ae65a9f49a1d7f02b0615fe04f921558033aa757665f37650ab1ffce5ba46506764e39a3a15dfa5d7ee813f0

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/elocVE9F1jVEym:GxD6jSm0uWRfCohFjVEl

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks