216.73.217.172

WarzoneRAT

The MITRE Corporation · Published 27/12/2021 18:21 · Modified 27/03/2026 01:07 Family

Essential information

Confidence
100/100
Is family
Yes
Published
27/12/2021 18:21
Modified
27/03/2026 01:07
Revoked
No
Author / Source
The MITRE Corporation
Related entities
79 attack patterns (mitre), 3 intrusion sets (apt), 6 sectors, 12 countries, 97 indicators, 3 vulnerabilities (cve)

Aliases

Warzone Ave Maria

Description

[WarzoneRAT](https://attack.mitre.org/software/S0670) is a malware-as-a-service remote access tool (RAT) written in C++ that has been publicly available for purchase since at least late 2018.(Citation: Check Point Warzone Feb 2020)(Citation: Uptycs Warzone UAC Bypass November 2020)

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.