Overview

overview

10

Static

static

10

1208-8-0x0...ry.exe

windows7-x64

1

1208-8-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1208-8-0x0000000000400000-0x000000000055E000-memory.dmp

  • Size

    1.4MB

  • MD5

    24bfb1f12e361243a313956d690055ea

  • SHA1

    f23980b053388b37bc7e37955949a7487fb66672

  • SHA256

    9d750e99d4a8dfcddd22820de148f28dda0090a3a9238e374aaf32f34f43c3c4

  • SHA512

    ce41eebf61ea5cce495ed3e64e59dc2e80e25b0a5abafa66a394af125dba726c6deb95b348d3fc2e518a72d5b66e7794d04f0da4a821459a11615ec7c982103f

  • SSDEEP

    3072:4NLOpnhTdOw9YAJOzIYpgVl01T2ENipdDR0z5:4NLYdT97JSIJl0QENqq

Score
10/10
ratwarzonerat

Malware Config

Extracted

Family

warzonerat

C2

198.46.177.153:4532

Signatures

  • Warzone RAT payload 1 IoCs
    rat
  • Warzonerat family
    warzonerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1208-8-0x0000000000400000-0x000000000055E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections