General
-
Target
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd.exe
-
Size
1.6MB
-
Sample
241121-eamb3aylbv
-
MD5
8d7c20e0b3834ba93482f9101881b2d0
-
SHA1
224544278bb8c543dddbbe1e280ec22b2550f91d
-
SHA256
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd
-
SHA512
1509b4eed102fde0def36ce6aa7af17a48bab733dbd94fc13ef9477d484fc43c6e1bc9eca8081a21c1f11571ddc122a1f4b694d3b30a4c5f6a9c7329c92809a6
-
SSDEEP
12288:EjTG/NEiKx8FAuRg7Q7X/CRLL6/mkIHTydNNAF4B0laLpfqFh:EiAuRg7SFWIyFh
Static task
static1
Behavioral task
behavioral1
Sample
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
warzonerat
cachepallioniwarznpa.icu:5200
Targets
-
-
Target
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd.exe
-
Size
1.6MB
-
MD5
8d7c20e0b3834ba93482f9101881b2d0
-
SHA1
224544278bb8c543dddbbe1e280ec22b2550f91d
-
SHA256
9105ed5f6521230b055750c074e96ccd16ff5b5589c7697d06fa240a34b33acd
-
SHA512
1509b4eed102fde0def36ce6aa7af17a48bab733dbd94fc13ef9477d484fc43c6e1bc9eca8081a21c1f11571ddc122a1f4b694d3b30a4c5f6a9c7329c92809a6
-
SSDEEP
12288:EjTG/NEiKx8FAuRg7Q7X/CRLL6/mkIHTydNNAF4B0laLpfqFh:EiAuRg7SFWIyFh
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzonerat family
-
Warzone RAT payload
-