General
-
Target
4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240526-cgawhabf35
-
MD5
4eb4cfca390b5558173a8ae221158510
-
SHA1
c9ff1fe82b2e4b2a27002f084f271f2010b2b9eb
-
SHA256
19d0efbec8dfd2019b9b8aad8f55f47348e8dfe6da7a6f8710cdd4f10a70e626
-
SHA512
16ea5044f968187108ec48ddbff667527b1d3d5edc3961c8d245952a2c685dbcdc0ca576ea53793d532bd53dea92721ffc79a8beb6329a1b363904f0a3c83f00
-
SSDEEP
1536:dcObJoSF+cJuGmqvb9xBwbAG2ukf2J1jVEyW:ea7VDBwbX2LujVEp
Behavioral task
behavioral1
Sample
4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe
-
Size
98KB
-
MD5
4eb4cfca390b5558173a8ae221158510
-
SHA1
c9ff1fe82b2e4b2a27002f084f271f2010b2b9eb
-
SHA256
19d0efbec8dfd2019b9b8aad8f55f47348e8dfe6da7a6f8710cdd4f10a70e626
-
SHA512
16ea5044f968187108ec48ddbff667527b1d3d5edc3961c8d245952a2c685dbcdc0ca576ea53793d532bd53dea92721ffc79a8beb6329a1b363904f0a3c83f00
-
SSDEEP
1536:dcObJoSF+cJuGmqvb9xBwbAG2ukf2J1jVEyW:ea7VDBwbX2LujVEp
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-