Behavioral task
behavioral1
Sample
3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d.exe
Resource
win10v2004-20240802-en
General
-
Target
3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d
-
Size
6.1MB
-
MD5
10ccfb48b3fdac746af0a198cd947288
-
SHA1
71200c1c2a052da712f1b086578f68cf5a4388af
-
SHA256
3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d
-
SHA512
e6b8830e70c8c11d69a33277a96cb8a0bf4bf485641440ffd754ff176b07eb112905d39b564a0438adb7b3c45eb04b8a1b9275a7549c97f33f351ab95d65fead
-
SSDEEP
49152:ATU7AAmw4gxeOw46fUbNecCCFbNecjTU7AAmw4gxeOw46fUbNecCCFbNecu:ATU7d9xZw46G8q8yTU7d9xZw46G8q8N
Malware Config
Signatures
-
Warzone RAT payload 1 IoCs
resource yara_rule sample warzonerat -
Warzonerat family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d
Files
-
3862972f557cdda70fcc672a92efd171f1de7324481fb3367e46afe94e79ac2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE