General

  • Target

    64ae466268e2c1466c195ec687bae310_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240525-kyevsacb8w

  • MD5

    64ae466268e2c1466c195ec687bae310

  • SHA1

    b6d90756c135cbb0f053dddacbde9e1ea8503daf

  • SHA256

    12c999d502713f235acaabc3dbcbdd4f85ad9ef5aedfd3b1388e2cf82ae859fa

  • SHA512

    8be72b2f3b76d0baa4e3ff602de0ce3c43b92a35f3b555259444a230f2ab21e6b12d92f93d6a417b875ad774d905c24f3178119b4b51795c5d47693d9b160022

  • SSDEEP

    1536:/hYKxB5PLShoyW+e18Kb62jbb+/0MGC4QN1jVEyh:/WkTRyCNbb+/lGhcjVEq

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      64ae466268e2c1466c195ec687bae310_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      64ae466268e2c1466c195ec687bae310

    • SHA1

      b6d90756c135cbb0f053dddacbde9e1ea8503daf

    • SHA256

      12c999d502713f235acaabc3dbcbdd4f85ad9ef5aedfd3b1388e2cf82ae859fa

    • SHA512

      8be72b2f3b76d0baa4e3ff602de0ce3c43b92a35f3b555259444a230f2ab21e6b12d92f93d6a417b875ad774d905c24f3178119b4b51795c5d47693d9b160022

    • SSDEEP

      1536:/hYKxB5PLShoyW+e18Kb62jbb+/0MGC4QN1jVEyh:/WkTRyCNbb+/lGhcjVEq

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks