General

  • Target

    b8bae977de0084fe924bce52527addfe1e4a5cf6c4396ee441c5ee382f8cc4f1

  • Size

    2.9MB

  • MD5

    1a8de2308977f8822008e4a8eb92c185

  • SHA1

    7ebe7ccb4b3889dd9508bff65b6d68e046b43e67

  • SHA256

    b8bae977de0084fe924bce52527addfe1e4a5cf6c4396ee441c5ee382f8cc4f1

  • SHA512

    16ddd21f9642a26696d27acf26e51cb6e066fedee728242475fd45582d3607a1244293d9b9985a0754a9309a174ec25b769bf6f6c272e59e01a743b60019213d

  • SSDEEP

    24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHM:ATU7AAmw4gxeOw46fUbNecCCFbNecJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8bae977de0084fe924bce52527addfe1e4a5cf6c4396ee441c5ee382f8cc4f1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections