warzonerat | 4e14978c56854dd782705a840537f3ece0b7824cf77bcafa1410635083fe7718 | Triage

Sharing

General

Target

4e14978c56854dd782705a840537f3ece0b7824cf77bcafa1410635083fe7718.exe
Size

1.8MB
Sample

250208-bdrt6sxqfr
MD5

5e63fc54e22372263d16b33cfe3c2e0d
SHA1

1a87cb1f083924c1982839241eef3f6bc4c1e3c2
SHA256

4e14978c56854dd782705a840537f3ece0b7824cf77bcafa1410635083fe7718
SHA512

212eace0cce8718c1e3cc0daa066c48b0f24fde2d7b85ec17b8d779e19fb507d8fa73a6e0b9d56785c3484357dc57620feb6e290d3e9a26664512ce8ac22e734
SSDEEP

12288:0ttgtirudG2aW7DkJzajoQ6UdyoRkVwT9iWuN09O6qA7W2FeDSIGVH/KIDgDgUe8:00zasCakodyoR/uGQDbGV6eH81kA

Score

10^/10

warzonerat discovery persistence rat

Malware Config

Targets

- Target
  
  4e14978c56854dd782705a840537f3ece0b7824cf77bcafa1410635083fe7718.exe
- Size
  
  1.8MB
- MD5
  
  5e63fc54e22372263d16b33cfe3c2e0d
- SHA1
  
  1a87cb1f083924c1982839241eef3f6bc4c1e3c2
- SHA256
  
  4e14978c56854dd782705a840537f3ece0b7824cf77bcafa1410635083fe7718
- SHA512
  
  212eace0cce8718c1e3cc0daa066c48b0f24fde2d7b85ec17b8d779e19fb507d8fa73a6e0b9d56785c3484357dc57620feb6e290d3e9a26664512ce8ac22e734
- SSDEEP
  
  12288:0ttgtirudG2aW7DkJzajoQ6UdyoRkVwT9iWuN09O6qA7W2FeDSIGVH/KIDgDgUe8:00zasCakodyoR/uGQDbGV6eH81kA
Score

8^/10

discovery persistence
- Downloads MZ/PE file
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence