Overview

overview

10

Static

static

10

69db497ec7...cs.exe

windows7-x64

10

69db497ec7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240525-q77j2sfc46

  • MD5

    69db497ec7e5980494f1393e7d007b50

  • SHA1

    ba600be2a32c5e7b58ef72aec67a69c9e88f755d

  • SHA256

    ca75fbb947e34dedefb2e46201a0e8af8f3abedb4a2328d1abce8f13211b2cb4

  • SHA512

    9442af4967101da119dc012f91ffa428f8d6fa0c4508e32997416b345144b1cff3f64142e7c2085e02396084a36d4dc0be5404edd44119f822088e9cb5d801ce

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/elocH9F1jVEy3:GxD6jSm0uWRfCowFjVE0

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      69db497ec7e5980494f1393e7d007b50

    • SHA1

      ba600be2a32c5e7b58ef72aec67a69c9e88f755d

    • SHA256

      ca75fbb947e34dedefb2e46201a0e8af8f3abedb4a2328d1abce8f13211b2cb4

    • SHA512

      9442af4967101da119dc012f91ffa428f8d6fa0c4508e32997416b345144b1cff3f64142e7c2085e02396084a36d4dc0be5404edd44119f822088e9cb5d801ce

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/elocH9F1jVEy3:GxD6jSm0uWRfCowFjVE0

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks