Extracted

• • Target

    JaffaCakes118_77ccf1a80dcbee4cdf2abeb36462e846

  • Size

    269KB

  • MD5

    77ccf1a80dcbee4cdf2abeb36462e846

  • SHA1

    800884ce8385b2fc192517b2213c59538580648f

  • SHA256

    b91fc51f8a846e5cf1a2e47a0c1406eadb13531d0dd694321c35f205081acc31

  • SHA512

    a9dcbd0e44b0a35a05f03b3ae0cc8a25843927bfc58413b7bf70be71d81b1a81377ccd4cd7a49d74818c7cfc32dc036546d6b3972f7c8d43ca96f3a8f4e11ca8

  • SSDEEP

    6144:2ycZPyvpVvTqsb/JWxwzgE/VQQIADG8el:2VZP63b/JWxoQQxD

  Score

  10^/10

  warzoneratdiscoveryinfostealerpersistencerat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2