Overview

overview

10

Static

static

10

WARZONE RA...ed.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WARZONE RAT 2.70 POISON.7z

  • Size

    13.5MB

  • Sample

    250127-3wq45szqck

  • MD5

    c31e616eac7651fa5ce64f8fe44e5102

  • SHA1

    d54f2bea426e14a123d60f0416a21bac68a564d2

  • SHA256

    110e664addd90770d63021a5c3eb1f10f4a419272b9b135327918284952785bb

  • SHA512

    2ecc0b19e521f40d3778c53047074668f3f3667202b92f06d5c5cb33faebd95fce6eb3dd4634149ccc3b69779f70594efd264838b1fee58335f51f7fd2647a8c

  • SSDEEP

    393216:VEOTG9k/ix5TepFyo5S0gHTq3v6Jwc3QX5+vpw1CEv:VbTG6oNepFyydUe/ceAhw8C

Score
10/10
warzoneratdiscoveryinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

127.0.0.1:5200

Targets

    • Target

      WARZONE RAT 2.70 POISON/Warzone Cracked.exe

    • Size

      529KB

    • MD5

      fc2dabf299a9b53c9176eea0888d171c

    • SHA1

      7956711f178354c0c38f479c7e9ef4a15a7c42c2

    • SHA256

      52b24b6304c986495bf28f660d507a2bc8a618e63b61c333641f930d9c2db7b9

    • SHA512

      7d507647c1a63eb6d5cb1c1dd03e17c3cdfab4c11dc66f4a832f5ad1fe0dbb78ed4c1bf88eb60750a2d58354ec2e426873ba0e795b8ae085fd4ea63b7fbde82e

    • SSDEEP

      6144:Rgf3v7Q4h9GgpTwEbb47QVwyGkuQwTxPz8NuftbwJTw0b:RK3v7QopEaHGkTsPz8NIOEK

    Score
    10/10
    warzoneratdiscoveryinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzonerat family

      warzonerat

    • Warzone RAT payload

      rat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks