Extracted

• • Target

    c475957ccf6c69f8d9463bd824c172c9261297bfb77d5404306d68264cb0bbee.exe

  • Size

    152KB

  • MD5

    ad1a8e1a58a2cff4c711e5cf721e2ae4

  • SHA1

    7e6a8fcf2c121783a2a76fc4eb10fcc148b062e9

  • SHA256

    c475957ccf6c69f8d9463bd824c172c9261297bfb77d5404306d68264cb0bbee

  • SHA512

    4490f18b5aa5e17a4e21e0e9c30c6ed1ebe8722cb6d14ac45730749f7081d07041fb247bd17a3e8d06a9b5b91bea143d29f001475809a5d5bcf83a9369ce2185

  • SSDEEP

    3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:4NLYdT97JSIFl0QENqF

  Score

  10^/10

  warzoneratcollectiondiscoveryinfostealerratspywarestealer

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2