Extracted

• • Target

    asdATS7sdd_encryptix.exe

  • Size

    175KB

  • MD5

    219f70af670bdb8775f77155f969ff05

  • SHA1

    acd9da0eaed2fc2fb974b2e20d25ea81027906de

  • SHA256

    f430e03de9760296609c2de83c1a44cc9f5e089d43059e8cb979c9a988133925

  • SHA512

    442be37fd95dd42b22969093cc8cefef23c823dcdaa07357f7af2d303766a5a6c53e23984c7f909914a2ee374147e65bb6b42b0ca7d828960612e64193992683

  • SSDEEP

    3072:H/4KgM/9oUsDjW1YsiH84IogGgDWcXmY+9iIlu9TjEifNAJQZToZd8Kss//+6UpF:HQKgMFdgEiHRLgDBXmDZu9TA8AJQZTo

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1