Extracted

• • Target

    d816b2f7f7028c523fd36158fc5d7967_JaffaCakes118

  • Size

    330KB

  • MD5

    d816b2f7f7028c523fd36158fc5d7967

  • SHA1

    da862ae275bbe9c8dc5e88440084e86b0c170036

  • SHA256

    1c0f69bbb0a2b2572330ec770f627b09dc82cf897a98733c7b214f2a2594546b

  • SHA512

    1a2004332762f441f059b35f91f2b1e1c35a6c534f0bfead57d490e92def05b852d2da1b56612e5f6b8c11b2b20457daa7369eef9ac63c2ecd812a64347ec81e

  • SSDEEP

    3072:6xRqJ9VWC29aUzFHBC8ZmNmUBx41o0GGGGGD+ubfzoP6hCuxLqYaod6+ZIad1d:6W9maUzFHb0NmUp+shC3Ya21F

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2