General
-
Target
a87999c9fd780b17b412b3cac3c5fc90_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240525-l4gr1adf22
-
MD5
a87999c9fd780b17b412b3cac3c5fc90
-
SHA1
f549a824cedb7a9129b46c52e642673c112757fc
-
SHA256
d266e47e7ad9f62d9e70ee251b24ae757b9ea48a0d6e3e6d28b13c8f41de3d14
-
SHA512
4ca12d8bb0d0541fb17bd9050e91b1f89e229761c2994800fd2e214aa8714b6ae2d1567cb62266b2c834655c3757066a1b91b1b1e06f75e20e0ea7eca7685fb0
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcZF11jVEyJ:mpjZ+cJBSY2djVEC
Behavioral task
behavioral1
Sample
a87999c9fd780b17b412b3cac3c5fc90_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a87999c9fd780b17b412b3cac3c5fc90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
a87999c9fd780b17b412b3cac3c5fc90_NeikiAnalytics.exe
-
Size
98KB
-
MD5
a87999c9fd780b17b412b3cac3c5fc90
-
SHA1
f549a824cedb7a9129b46c52e642673c112757fc
-
SHA256
d266e47e7ad9f62d9e70ee251b24ae757b9ea48a0d6e3e6d28b13c8f41de3d14
-
SHA512
4ca12d8bb0d0541fb17bd9050e91b1f89e229761c2994800fd2e214aa8714b6ae2d1567cb62266b2c834655c3757066a1b91b1b1e06f75e20e0ea7eca7685fb0
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcZF11jVEyJ:mpjZ+cJBSY2djVEC
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-