General

  • Target

    d396f349cb37954968d1565fe16dee383c7673bae7a147a4d6fa33be628a177a

  • Size

    2.9MB

  • MD5

    9ec16d54e92c1c9237d7faf403bb2961

  • SHA1

    b907d57602110f3ed92399e53e18bf7cf2aada8b

  • SHA256

    d396f349cb37954968d1565fe16dee383c7673bae7a147a4d6fa33be628a177a

  • SHA512

    42bb161204885e3b84d356e39b6e72eba61a72a7d6f1c03ca97f03cfbd2c1a3acd1d3f681537e34f1ff49a492510bfd12fd432b90b5a9a72c8e313aa22cbeba3

  • SSDEEP

    24576:ATU7AfmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHY:ATU7Afmw4gxeOw46fUbNecCCFbNecZ

Score
10/10

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d396f349cb37954968d1565fe16dee383c7673bae7a147a4d6fa33be628a177a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections