General
-
Target
69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240525-q77j2sfc46
-
MD5
69db497ec7e5980494f1393e7d007b50
-
SHA1
ba600be2a32c5e7b58ef72aec67a69c9e88f755d
-
SHA256
ca75fbb947e34dedefb2e46201a0e8af8f3abedb4a2328d1abce8f13211b2cb4
-
SHA512
9442af4967101da119dc012f91ffa428f8d6fa0c4508e32997416b345144b1cff3f64142e7c2085e02396084a36d4dc0be5404edd44119f822088e9cb5d801ce
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocH9F1jVEy3:GxD6jSm0uWRfCowFjVE0
Behavioral task
behavioral1
Sample
69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
69db497ec7e5980494f1393e7d007b50_NeikiAnalytics.exe
-
Size
98KB
-
MD5
69db497ec7e5980494f1393e7d007b50
-
SHA1
ba600be2a32c5e7b58ef72aec67a69c9e88f755d
-
SHA256
ca75fbb947e34dedefb2e46201a0e8af8f3abedb4a2328d1abce8f13211b2cb4
-
SHA512
9442af4967101da119dc012f91ffa428f8d6fa0c4508e32997416b345144b1cff3f64142e7c2085e02396084a36d4dc0be5404edd44119f822088e9cb5d801ce
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocH9F1jVEy3:GxD6jSm0uWRfCowFjVE0
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-