warzonerat | 22d5f44e696e41317081c500a2ee9aecc18e0093d05e3f99e21e2ccb7ca4f994 | Triage

Resubmissions

13-01-2025 04:24

250113-e1qgeaykcj 10

12-01-2025 18:25

250112-w2kqzswlap 10

Sharing

General

Target

22d5f44e696e41317081c500a2ee9aecc18e0093d05e3f99e21e2ccb7ca4f994.exe
Size

2.9MB
Sample

250112-w2kqzswlap
MD5

b301fcd837bc76a763b37dd59ae8c266
SHA1

2e6610726c9419df3a4d32a1bad0d5d6e3582c9d
SHA256

22d5f44e696e41317081c500a2ee9aecc18e0093d05e3f99e21e2ccb7ca4f994
SHA512

2a639f1afec3848a10a91887e5f9009783bdefd0f87b7a7a55a9f4ddc261a61b29cf888ea562946b298cb423ccab748c3ace92fa961ef32926c00c1f21c907df
SSDEEP

24576:7v97AXmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHr:7v97AXmw4gxeOw46fUbNecCCFbNecE

Score

10^/10

warzonerat discovery persistence rat

Malware Config

Targets

- Target
  
  22d5f44e696e41317081c500a2ee9aecc18e0093d05e3f99e21e2ccb7ca4f994.exe
- Size
  
  2.9MB
- MD5
  
  b301fcd837bc76a763b37dd59ae8c266
- SHA1
  
  2e6610726c9419df3a4d32a1bad0d5d6e3582c9d
- SHA256
  
  22d5f44e696e41317081c500a2ee9aecc18e0093d05e3f99e21e2ccb7ca4f994
- SHA512
  
  2a639f1afec3848a10a91887e5f9009783bdefd0f87b7a7a55a9f4ddc261a61b29cf888ea562946b298cb423ccab748c3ace92fa961ef32926c00c1f21c907df
- SSDEEP
  
  24576:7v97AXmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eHr:7v97AXmw4gxeOw46fUbNecCCFbNecE
Score

7^/10

discovery persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence