General
-
Target
6e8ccebd6463cb38312f3c9c646f1e80N.exe
-
Size
98KB
-
Sample
240803-jqy31s1hld
-
MD5
6e8ccebd6463cb38312f3c9c646f1e80
-
SHA1
79ab9d51ce36b26f19207aea9c9b8cff57967c7a
-
SHA256
d19591696ed38c40ff3f364a619774f2c0af428e9698c72cf7c644117046b031
-
SHA512
586819801443f16378750a7047f02440a47966269215bd41945c416490aa3f63e357d0c2245cf632141fa29d43ee9ed3112774d7ece904456fbdc395c9a20ec6
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocc9F1jVEyn:GxD6jSm0uWRfCo/FjVEs
Behavioral task
behavioral1
Sample
6e8ccebd6463cb38312f3c9c646f1e80N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6e8ccebd6463cb38312f3c9c646f1e80N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
6e8ccebd6463cb38312f3c9c646f1e80N.exe
-
Size
98KB
-
MD5
6e8ccebd6463cb38312f3c9c646f1e80
-
SHA1
79ab9d51ce36b26f19207aea9c9b8cff57967c7a
-
SHA256
d19591696ed38c40ff3f364a619774f2c0af428e9698c72cf7c644117046b031
-
SHA512
586819801443f16378750a7047f02440a47966269215bd41945c416490aa3f63e357d0c2245cf632141fa29d43ee9ed3112774d7ece904456fbdc395c9a20ec6
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocc9F1jVEyn:GxD6jSm0uWRfCo/FjVEs
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-