General
-
Target
tes1.exe
-
Size
132KB
-
Sample
240727-b5p5nayfnp
-
MD5
b77ff60d464d3aa97d0432680c468bf5
-
SHA1
9523926751ef97005e7c87beac04ef74ba353fe2
-
SHA256
eb71118942d0a74070e815d3aa153cca01c172f4bce9c64fe64b097ce95ec797
-
SHA512
699bb186b2859460d86ce1cff238665ecb3ed27291e7f8c2d85632e98596a0e31b186096e5fd1d3c77d52b3e5e029f0aa0f0f2a81e20ee8d79010d32627984ac
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Behavioral task
behavioral1
Sample
tes1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
tes1.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
warzonerat
194.59.30.96:7771
Targets
-
-
Target
tes1.exe
-
Size
132KB
-
MD5
b77ff60d464d3aa97d0432680c468bf5
-
SHA1
9523926751ef97005e7c87beac04ef74ba353fe2
-
SHA256
eb71118942d0a74070e815d3aa153cca01c172f4bce9c64fe64b097ce95ec797
-
SHA512
699bb186b2859460d86ce1cff238665ecb3ed27291e7f8c2d85632e98596a0e31b186096e5fd1d3c77d52b3e5e029f0aa0f0f2a81e20ee8d79010d32627984ac
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-