Extracted

• • Target

    JaffaCakes118_1453ccc90c565eae1a04022720d7c574

  • Size

    225KB

  • MD5

    1453ccc90c565eae1a04022720d7c574

  • SHA1

    b2582c6530bab3f97717b9f026fc205988c04656

  • SHA256

    0675bc87d32c490c5c19f4a64886531d97ee09c08ae6e26b59bb749c2f4cc043

  • SHA512

    24261bc1f9dedf8a23822002762517a81c4e0f2c2615aeff9c4cddfdb04a6c9dea2c4c435f025e106d13da59e7bb965f001766e7483382157380de6370147ae0

  • SSDEEP

    1536:EU/UTIZ/IdeczI9uutwlYcN5FywcYODDklvMoHWt1fe/ofOAvZspLs21hVW2ofXM:NDG

  Score

  10^/10

  executionwarzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2