General

  • Target

    740d7a3e4b5756182e0bc9777d75f047_JaffaCakes118

  • Size

    113KB

  • Sample

    241024-rb5agsyepe

  • MD5

    740d7a3e4b5756182e0bc9777d75f047

  • SHA1

    1a25f0e590a035ef27a63b801b49bde4b3b8632d

  • SHA256

    a2697056dbb13ff4ae122354378f194b52f235e99d860f6a7e0a9c048a310681

  • SHA512

    70148abb4dbfc125a514c21b22cb6fbc26d311a0f76e887f1b330230f2eb60e26c24cbb0ef288ccc564992a94218f7cf5a1ea0793245faf42659489f7f248987

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

Malware Config

Extracted

Family

warzonerat

C2

194.5.97.224:20201

Targets

    • Target

      740d7a3e4b5756182e0bc9777d75f047_JaffaCakes118

    • Size

      113KB

    • MD5

      740d7a3e4b5756182e0bc9777d75f047

    • SHA1

      1a25f0e590a035ef27a63b801b49bde4b3b8632d

    • SHA256

      a2697056dbb13ff4ae122354378f194b52f235e99d860f6a7e0a9c048a310681

    • SHA512

      70148abb4dbfc125a514c21b22cb6fbc26d311a0f76e887f1b330230f2eb60e26c24cbb0ef288ccc564992a94218f7cf5a1ea0793245faf42659489f7f248987

    • SSDEEP

      1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Enterprise v15

Tasks