General
-
Target
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9N
-
Size
132KB
-
Sample
241003-e343ksybmf
-
MD5
5051abbc436144e319c357ed85d7a560
-
SHA1
1ca0f33b9284c440b46db7d641344f08f0ae6ae4
-
SHA256
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9
-
SHA512
658dd19422c0443215c154d2509451e844a4b9d649a44a2a0b97cb581658b5e7bbcacafe34b9d48c396ba0834cc6387b2284c949fb6ead800e73bcaddf47e978
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Behavioral task
behavioral1
Sample
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
warzonerat
verde2021.duckdns.org:7788
Targets
-
-
Target
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9N
-
Size
132KB
-
MD5
5051abbc436144e319c357ed85d7a560
-
SHA1
1ca0f33b9284c440b46db7d641344f08f0ae6ae4
-
SHA256
d5b96f287617e26c4d200387289557afda627550dd23c93c35c73b448f9b74c9
-
SHA512
658dd19422c0443215c154d2509451e844a4b9d649a44a2a0b97cb581658b5e7bbcacafe34b9d48c396ba0834cc6387b2284c949fb6ead800e73bcaddf47e978
-
SSDEEP
3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Adds Run key to start application
-