General
-
Target
920e235f1d880f6ecfea4e6a7b012380_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240525-c9kleacb26
-
MD5
920e235f1d880f6ecfea4e6a7b012380
-
SHA1
6f69b0cc0a4e17493801e74d0ee85049bf514291
-
SHA256
060c2f23a55660a9878d5dfe8a30cee039131ee18c14e7fe96ea46c873edb61d
-
SHA512
d1a5accbb76cb98c3a33fae985f2e0153d1e3994f2e1f1ac82020945bb4542abb554f2f9ca4443c0572920b488a7c4496e8c4d96221131b40d023791c9d24534
-
SSDEEP
1536:rKEWGwr8SQgoJ5BJsbNliwNBWhg0oRnt1jVEyp:etf7R6wNBWgD5jVEy
Behavioral task
behavioral1
Sample
920e235f1d880f6ecfea4e6a7b012380_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
920e235f1d880f6ecfea4e6a7b012380_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
920e235f1d880f6ecfea4e6a7b012380_NeikiAnalytics.exe
-
Size
98KB
-
MD5
920e235f1d880f6ecfea4e6a7b012380
-
SHA1
6f69b0cc0a4e17493801e74d0ee85049bf514291
-
SHA256
060c2f23a55660a9878d5dfe8a30cee039131ee18c14e7fe96ea46c873edb61d
-
SHA512
d1a5accbb76cb98c3a33fae985f2e0153d1e3994f2e1f1ac82020945bb4542abb554f2f9ca4443c0572920b488a7c4496e8c4d96221131b40d023791c9d24534
-
SSDEEP
1536:rKEWGwr8SQgoJ5BJsbNliwNBWhg0oRnt1jVEyp:etf7R6wNBWgD5jVEy
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-