Extracted

• • Target

    1b4d6e3ca2e51ca857bd4cc84c8b02c07f40bc55a67cc9a52be46afecf4d199a.exe

  • Size

    152KB

  • MD5

    5aae8462f845854f8e15f1c17abb73a0

  • SHA1

    13d05504fc37678ad1e7c37444c6aabdae5453a0

  • SHA256

    1b4d6e3ca2e51ca857bd4cc84c8b02c07f40bc55a67cc9a52be46afecf4d199a

  • SHA512

    974deb28f5f5f75d67a7e8ddcf5ac96ac9945006ee5fffcb153c81f495c18badffa58d824a9a9d8b0141c1537c57a2c7a7bcc59ef93e9e762568bbf3e1526814

  • SSDEEP

    3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5f:4NLYdT97JSIFl0QENqFf

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2