Overview

overview

10

Static

static

10

347d7db764...cs.exe

windows7-x64

10

347d7db764...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    347d7db7649580cb3e69dcbc5aff9460_NeikiAnalytics.exe

  • Size

    113KB

  • Sample

    240525-3cx4caeh88

  • MD5

    347d7db7649580cb3e69dcbc5aff9460

  • SHA1

    f78801a35360fc15786950dce588f1a57923034e

  • SHA256

    7a95791799ed702ae7d2e262b57a8f732aef2a73e14b144b5235aab91884eaae

  • SHA512

    a51fcf77a2161995df35570f43bdcc6e869c602e4113f70ce4977b78cd6e5d9191270835c1be2cff5ee16c1754644b77f3292487d8d154fda666c1b7ad841be8

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWeB4u0OVE01:K1VmhaH8EFvWe0OVE0

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

64.112.87.127:6789

Targets

    • Target

      347d7db7649580cb3e69dcbc5aff9460_NeikiAnalytics.exe

    • Size

      113KB

    • MD5

      347d7db7649580cb3e69dcbc5aff9460

    • SHA1

      f78801a35360fc15786950dce588f1a57923034e

    • SHA256

      7a95791799ed702ae7d2e262b57a8f732aef2a73e14b144b5235aab91884eaae

    • SHA512

      a51fcf77a2161995df35570f43bdcc6e869c602e4113f70ce4977b78cd6e5d9191270835c1be2cff5ee16c1754644b77f3292487d8d154fda666c1b7ad841be8

    • SSDEEP

      1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWeB4u0OVE01:K1VmhaH8EFvWe0OVE0

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks