General
-
Target
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880.exe
-
Size
141KB
-
Sample
241119-seckbaxkgv
-
MD5
2222f3cf1ac5436b12b51706c497d3ef
-
SHA1
fc529d33fae16b37d00f7b39b40c5d6a722d6065
-
SHA256
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880
-
SHA512
7fecf6b81bf1bc4733218b62d864417ad00234d0aaa95811507d0067367026f455af1b47461b72150faeb42a2c9df92340e62f3f7535dc3f2146d6aac9e46271
-
SSDEEP
3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj
Behavioral task
behavioral1
Sample
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
warzonerat
103.147.185.18:5200
Targets
-
-
Target
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880.exe
-
Size
141KB
-
MD5
2222f3cf1ac5436b12b51706c497d3ef
-
SHA1
fc529d33fae16b37d00f7b39b40c5d6a722d6065
-
SHA256
f3165a426e73b3dce639c5f44c0c6dca403a363fa07abf4458e61f7a61d7d880
-
SHA512
7fecf6b81bf1bc4733218b62d864417ad00234d0aaa95811507d0067367026f455af1b47461b72150faeb42a2c9df92340e62f3f7535dc3f2146d6aac9e46271
-
SSDEEP
3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzonerat family
-
Adds Run key to start application
-