Overview

overview

10

Static

static

10

WARZONE-ma...AT.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    WARZONE-main.zip
  • Size 9.7MB
  • Sample260226-sc399ags4f
  • SHA256 4d4eef6d9f4f5cb84c3193f35ab38361b39ef146e506fbb864cf603f9c8a893d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
warzoneratdiscoveryinfostealerpersistencerat

Malware Config

Extracted

Family

  • warzonerat

C2

  • holaquetal.com:5200

Targets

    • Target
      WARZONE-main/WARZONE RAT 1.84 CRACKED/WARZONE RAT.exe
    • Size 4.7MB
    • SHA256 ff7743a58c915481a6ad7d03525e15d0f9871658ce1497dfac490373850b9c11
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverywarzoneratinfostealerpersistencerat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzonerat family

      warzonerat

    • Warzone RAT payload

      rat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks