Overview

overview

10

Static

static

10

822fe68adc...cs.exe

windows7-x64

10

822fe68adc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics

  • Size

    98KB

  • Sample

    240531-2bx7aage33

  • MD5

    822fe68adc29d401bbd7a02c20b6c150

  • SHA1

    0ffc8cfa49feadff5241176136643e1ead813203

  • SHA256

    301d992109e2aae983b23cac33f542e2352525457c59f8a354a03d03fb4bcef0

  • SHA512

    e37a1cdc58a0d78ad1d19da3868b51cd097043aa2a1806e3a6ce25eae356d46adde3daea08c010ec7085d669abe8a8d66c056dc64086c22d30c0580c582f49e1

  • SSDEEP

    1536:pASlJtTOFUGowSDxj3SPvcOJOiKy8E91jVEyN:eozpV3SPHJOq8wjVEC

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics

    • Size

      98KB

    • MD5

      822fe68adc29d401bbd7a02c20b6c150

    • SHA1

      0ffc8cfa49feadff5241176136643e1ead813203

    • SHA256

      301d992109e2aae983b23cac33f542e2352525457c59f8a354a03d03fb4bcef0

    • SHA512

      e37a1cdc58a0d78ad1d19da3868b51cd097043aa2a1806e3a6ce25eae356d46adde3daea08c010ec7085d669abe8a8d66c056dc64086c22d30c0580c582f49e1

    • SSDEEP

      1536:pASlJtTOFUGowSDxj3SPvcOJOiKy8E91jVEyN:eozpV3SPHJOq8wjVEC

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks