General
-
Target
77bc683e38f8d8c9c19a7c7ef0c20640_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240525-j3db3sbc6w
-
MD5
77bc683e38f8d8c9c19a7c7ef0c20640
-
SHA1
85deee913980d27b3a39d1a0a86242b01bc8f8e7
-
SHA256
0ac7176c3054a7a3237b6eda95c52e2471a68ca02e37e10780f6d32b2d8c3795
-
SHA512
3c37c841c4a0695b162a9e7416a40a7c10cf948bace2e060461ccb31d598887ef6281c867d7edc07e1cccf2e2448be86b67cf20f7e35a5867f70432e47bf4370
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9Yc0+EsF11jVEyB:mpjZ+cJBSYKndjVEy
Behavioral task
behavioral1
Sample
77bc683e38f8d8c9c19a7c7ef0c20640_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77bc683e38f8d8c9c19a7c7ef0c20640_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
77bc683e38f8d8c9c19a7c7ef0c20640_NeikiAnalytics.exe
-
Size
98KB
-
MD5
77bc683e38f8d8c9c19a7c7ef0c20640
-
SHA1
85deee913980d27b3a39d1a0a86242b01bc8f8e7
-
SHA256
0ac7176c3054a7a3237b6eda95c52e2471a68ca02e37e10780f6d32b2d8c3795
-
SHA512
3c37c841c4a0695b162a9e7416a40a7c10cf948bace2e060461ccb31d598887ef6281c867d7edc07e1cccf2e2448be86b67cf20f7e35a5867f70432e47bf4370
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9Yc0+EsF11jVEyB:mpjZ+cJBSYKndjVEy
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-