Overview

overview

10

Static

static

10

6446ca15df...92.exe

windows7-x64

10

6446ca15df...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6446ca15df9ea1d91e1e13bd269892436dd70cfc95c7b5fa1a7ed6c7671fb392

  • Size

    98KB

  • Sample

    240525-2egcyacg3t

  • MD5

    51b355d80b2bd090937326407580badb

  • SHA1

    ce5ca4a30d64bafe9aac3680210b8fac25f419f9

  • SHA256

    6446ca15df9ea1d91e1e13bd269892436dd70cfc95c7b5fa1a7ed6c7671fb392

  • SHA512

    bb45f5a55c1ef07ad45a978a13cae3122b31ca58aa3a46ee597c79ea9cab8b2f53e3fe63dc91815fc4fac943a4bd1d5d8c610dfaf73e792f933b8cb3ea085e53

  • SSDEEP

    1536:b60eDNKgTAgkw+BMrtU4FxW5Aku5is1jVEyX:Ol3ThS4FxeAJRjVE8

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      6446ca15df9ea1d91e1e13bd269892436dd70cfc95c7b5fa1a7ed6c7671fb392

    • Size

      98KB

    • MD5

      51b355d80b2bd090937326407580badb

    • SHA1

      ce5ca4a30d64bafe9aac3680210b8fac25f419f9

    • SHA256

      6446ca15df9ea1d91e1e13bd269892436dd70cfc95c7b5fa1a7ed6c7671fb392

    • SHA512

      bb45f5a55c1ef07ad45a978a13cae3122b31ca58aa3a46ee597c79ea9cab8b2f53e3fe63dc91815fc4fac943a4bd1d5d8c610dfaf73e792f933b8cb3ea085e53

    • SSDEEP

      1536:b60eDNKgTAgkw+BMrtU4FxW5Aku5is1jVEyX:Ol3ThS4FxeAJRjVE8

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks