General
- Target jaffacakes118_Trojan-Spy.Win32.AveMaria.bhy.27add47ddc653cebabfae7aa89b11120
- Size 1.1MB
- Sample261006-vnd6lsbs6v
- SHA256 f7178b6df10cccf8f09d14f3579f486af76917b5c8d4517a111b90902293beed
- MD5 27add47ddc653cebabfae7aa89b11120
- SHA1 42f7d19c2f37a554eca76daa45a20393cac6bfd2
- SHA512 c0cee13baf6f7778ee9c4a687485c387edaad5370c543590ff2c0eaeb94de8177904a7344193a4ad076933ffde847b5ec2c7d7e099bf54750f0d0c832648be80
- SSDEEP 24576:XPepF8BpvOSZJyOUYfgOWNlWaMKilL3eIlbjWchR7f:ViS0NwHTuINWOf
- TLSH T15645F821A347C662C05DC0B5F265EA3564ADBCF138348C827344FAB1EE790459AD9FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.AveMaria.bhy.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.AveMaria.bhy.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.AveMaria.bhy.27add47ddc653cebabfae7aa89b11120
- Size 1.1MB
- SHA256 f7178b6df10cccf8f09d14f3579f486af76917b5c8d4517a111b90902293beed
- MD5 27add47ddc653cebabfae7aa89b11120
- SHA1 42f7d19c2f37a554eca76daa45a20393cac6bfd2
- SHA512 c0cee13baf6f7778ee9c4a687485c387edaad5370c543590ff2c0eaeb94de8177904a7344193a4ad076933ffde847b5ec2c7d7e099bf54750f0d0c832648be80
- SSDEEP 24576:XPepF8BpvOSZJyOUYfgOWNlWaMKilL3eIlbjWchR7f:ViS0NwHTuINWOf
- TLSH T15645F821A347C662C05DC0B5F265EA3564ADBCF138348C827344FAB1EE790459AD9FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload