Extracted

• • Target

    New order.scr

  • Size

    514KB

  • MD5

    f3c47c8e567df8678fb83a825baa5789

  • SHA1

    1c17a349f537f276685c4f3f7eb1da18193f2e23

  • SHA256

    57938cb80e99cf9a194713f9881ade81408229ce437ec8cd0e632c25a14d2bda

  • SHA512

    7d72c5ca458f7e6efbfa8729a5af36db06016d94e25c6c7da36eb9f585545ed3fc891d37dea999b2a87602da2a0fb5f70d556f482631fd5091b0c0e612b337fe

  • SSDEEP

    12288:A1RveBYTrDxr5fKuuGMz6z9BokDCQTyBX2XLh6Ezp1XlJcLL:A1RWBYVlK7GMGBBoqCQTyBGXLhdt11JC

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2