Extracted

• • Target

    JaffaCakes118_da7299c8bc3f5685b5263b48f7ab8991

  • Size

    340KB

  • MD5

    da7299c8bc3f5685b5263b48f7ab8991

  • SHA1

    7a6ab1d8fef93ac0554d38522e269cd70371f90c

  • SHA256

    e772c52e81eb93cc4fd86978428d8f734f9426b4dbe312bc1f0bb868b388a2bd

  • SHA512

    ab3c9791a68d7a10bd1761a61189cace923849e8800c926961ebda5a67e3d1a7e868a8344e37a3d7515070742fd45fe8d36ed03a4132bdfbed0850c243d181aa

  • SSDEEP

    6144:MYOrEsPulK5Rqp6yHsYz8LJx6bOWJ1Pw84dG9hN1fDWT:ZOrEsyOYH92IIu9hbc

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2