General

  • Target

    f91b49d351d58d61ec00bc6773b448c0c7504674dc8e4d630fa442b3fb130a01N.exe

  • Size

    2.7MB

  • MD5

    bced16d85a69bc7bd7367b7bacf258f0

  • SHA1

    9ea5cd962ef798bdf6fd0094f4c7ce1d7f9d9bed

  • SHA256

    f91b49d351d58d61ec00bc6773b448c0c7504674dc8e4d630fa442b3fb130a01

  • SHA512

    13d5b9e9d097db6001466eefdc95a069420e980ae117bc0cb665f49b59ce677f821fe0f495e6b4f1518490d3f9ca9e6993420f1d6890600c79d9014b7ed35c62

  • SSDEEP

    24576:ssF6mZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH81G:fF6mw4gxeOw46fUbNecCCFbNecs

Score
10/10

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f91b49d351d58d61ec00bc6773b448c0c7504674dc8e4d630fa442b3fb130a01N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections