Extracted

• • Target

    5f149a72e815ea2a625790c88ed1e37f2fe70495dfa348c177c2405a9c246f01

  • Size

    193KB

  • MD5

    b1c1243d05e33560bfbda42ce515db8f

  • SHA1

    01520181345c098a6d4b58a5a3c377b971a1cdce

  • SHA256

    5f149a72e815ea2a625790c88ed1e37f2fe70495dfa348c177c2405a9c246f01

  • SHA512

    d72fe34c624207b2541ca9a0e2c1d6f9dbda1297df32c8a60c53cb7c31732b92278fb51017dbd9b28f28bdfd340e644c06ce5e262e90831e0b6eed42a5f144a5

  • SSDEEP

    3072:wfbAXHvklIsAlXl50hoe0TIUOGRnsayg6lmRkpD7JSPlH5jaXeqTB:aAclIxlXl50K1O2sayCk19onaXeqT

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2