warzonerat | eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb | Triage

Submit
Reports

Overview

overview

Static

static

eb8bfe1aec...eb.exe

windows7-x64

7

eb8bfe1aec...eb.exe

windows10-2004-x64

7

Sharing

General

Target

eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb.exe
Size

2.9MB
Sample

250117-ad8x1svqew
MD5

fc5625903cbd80b16bf821710fdfb902
SHA1

c0c04714d7781aa844ea6ba4b08d497b41328592
SHA256

eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb
SHA512

6afd5e3bf91045427efd73e14e5948b1447139a6be07e3b77cd44c26cd21f93bed15dddb11c12cc1c5ceb836771ccb02bf30fd8cf7356846f9e4541bb0ed12d9
SSDEEP

24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH6:ATU7AAmw4gxeOw46fUbNecCCFbNec1

Score

10^/10

warzonerat discovery persistence rat upx

Static task

static1

rat upx warzonerat

4 signatures

Behavioral task

behavioral1

Sample

eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb.exe

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb.exe

Resource

win10v2004-20241007-en

discovery persistence upx

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb.exe
- Size
  
  2.9MB
- MD5
  
  fc5625903cbd80b16bf821710fdfb902
- SHA1
  
  c0c04714d7781aa844ea6ba4b08d497b41328592
- SHA256
  
  eb8bfe1aec61b6351b22171bc1fc9c7ff0b9b3f7284454d24a0a823426c280eb
- SHA512
  
  6afd5e3bf91045427efd73e14e5948b1447139a6be07e3b77cd44c26cd21f93bed15dddb11c12cc1c5ceb836771ccb02bf30fd8cf7356846f9e4541bb0ed12d9
- SSDEEP
  
  24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH6:ATU7AAmw4gxeOw46fUbNecCCFbNec1
Score

7^/10

discovery persistence upx
- Drops startup file
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

ratupxwarzonerat

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy