General
-
Target
305d5bb6747f4e95c02af699575d4ff0_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240525-2y95csdf6s
-
MD5
305d5bb6747f4e95c02af699575d4ff0
-
SHA1
060683d2364e9c7c7f77bbe2188f92b6bc8eebf9
-
SHA256
33c5efb803a354d6dc21d5d088354fc7a9fdab9f673ffa3c0eed369a205ee064
-
SHA512
5ebe7898fe833f8567dcbee6162ac8c06db4edfe0945ee8856837e9ab3f806cb24844ff409f89da72582f221820bd389c94b0d7416bd3fda1f6afdaf7d164741
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocI9F1jVEyx:GxD6jSm0uWRfCovFjVEq
Behavioral task
behavioral1
Sample
305d5bb6747f4e95c02af699575d4ff0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
305d5bb6747f4e95c02af699575d4ff0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
305d5bb6747f4e95c02af699575d4ff0_NeikiAnalytics.exe
-
Size
98KB
-
MD5
305d5bb6747f4e95c02af699575d4ff0
-
SHA1
060683d2364e9c7c7f77bbe2188f92b6bc8eebf9
-
SHA256
33c5efb803a354d6dc21d5d088354fc7a9fdab9f673ffa3c0eed369a205ee064
-
SHA512
5ebe7898fe833f8567dcbee6162ac8c06db4edfe0945ee8856837e9ab3f806cb24844ff409f89da72582f221820bd389c94b0d7416bd3fda1f6afdaf7d164741
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocI9F1jVEyx:GxD6jSm0uWRfCovFjVEq
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-