Extracted

• • Target

    JaffaCakes118_441d9b3c1ef8005b874698b24bf9d96b

  • Size

    292KB

  • MD5

    441d9b3c1ef8005b874698b24bf9d96b

  • SHA1

    3cbb1636624ca4aec26cb5c69bef671e45f59d92

  • SHA256

    e32ecbde657fe941e2b07464a070bb0bca7516c32754e73f425ea1e7ab589594

  • SHA512

    17d60a44cb5d80e3c54b16efc8a3d8916c9b32911d5b7e5df83d376489d59246e267245d549b73a6e069ba711c01186a4c482ed7af74a5dbc2e01969a44cc0b6

  • SSDEEP

    6144:9IguUIyFAEEBZPwffW99vyKcM9rTsRs/4j+Sb:TuGmAW9hPrTB/4y

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2