Overview

overview

10

Static

static

10

8a9562fbe7...18.exe

windows7-x64

10

8a9562fbe7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a9562fbe70135d0ecfae24cb0dbc257_JaffaCakes118

  • Size

    98KB

  • Sample

    240601-qn57wadd2x

  • MD5

    8a9562fbe70135d0ecfae24cb0dbc257

  • SHA1

    5ac329d37a4badd371faac37e6f33946b56ef048

  • SHA256

    95a423011a162e4fd1766a0c67c2ba154b8ab3766992fba393080a7e17955484

  • SHA512

    b8a8a050a7c643b4f98313549d781282f830fa83ffc16b287f6e3052677193224287444f0608eeba8d1c016bafdc0a261ab50cf0dfe779f7b24364c856527be2

  • SSDEEP

    1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

80.89.238.208:5200

Targets

    • Target

      8a9562fbe70135d0ecfae24cb0dbc257_JaffaCakes118

    • Size

      98KB

    • MD5

      8a9562fbe70135d0ecfae24cb0dbc257

    • SHA1

      5ac329d37a4badd371faac37e6f33946b56ef048

    • SHA256

      95a423011a162e4fd1766a0c67c2ba154b8ab3766992fba393080a7e17955484

    • SHA512

      b8a8a050a7c643b4f98313549d781282f830fa83ffc16b287f6e3052677193224287444f0608eeba8d1c016bafdc0a261ab50cf0dfe779f7b24364c856527be2

    • SSDEEP

      1536:5Csejmb+6BQyusX1UjtA0uWRf/eloc/9T1jVEyp:AtD6jSm0uWRfCogTjVEG

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks