Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 23:22

General

  • Target

    347d7db7649580cb3e69dcbc5aff9460_NeikiAnalytics.exe

  • Size

    113KB

  • MD5

    347d7db7649580cb3e69dcbc5aff9460

  • SHA1

    f78801a35360fc15786950dce588f1a57923034e

  • SHA256

    7a95791799ed702ae7d2e262b57a8f732aef2a73e14b144b5235aab91884eaae

  • SHA512

    a51fcf77a2161995df35570f43bdcc6e869c602e4113f70ce4977b78cd6e5d9191270835c1be2cff5ee16c1754644b77f3292487d8d154fda666c1b7ad841be8

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWeB4u0OVE01:K1VmhaH8EFvWe0OVE0

Malware Config

Signatures

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

Processes

  • C:\Users\Admin\AppData\Local\Temp\347d7db7649580cb3e69dcbc5aff9460_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\347d7db7649580cb3e69dcbc5aff9460_NeikiAnalytics.exe"
    1⤵
      PID:1672

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads