Overview

overview

10

Static

static

10

4eb4cfca39...cs.exe

windows7-x64

10

4eb4cfca39...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240526-cgawhabf35

  • MD5

    4eb4cfca390b5558173a8ae221158510

  • SHA1

    c9ff1fe82b2e4b2a27002f084f271f2010b2b9eb

  • SHA256

    19d0efbec8dfd2019b9b8aad8f55f47348e8dfe6da7a6f8710cdd4f10a70e626

  • SHA512

    16ea5044f968187108ec48ddbff667527b1d3d5edc3961c8d245952a2c685dbcdc0ca576ea53793d532bd53dea92721ffc79a8beb6329a1b363904f0a3c83f00

  • SSDEEP

    1536:dcObJoSF+cJuGmqvb9xBwbAG2ukf2J1jVEyW:ea7VDBwbX2LujVEp

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      4eb4cfca390b5558173a8ae221158510_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      4eb4cfca390b5558173a8ae221158510

    • SHA1

      c9ff1fe82b2e4b2a27002f084f271f2010b2b9eb

    • SHA256

      19d0efbec8dfd2019b9b8aad8f55f47348e8dfe6da7a6f8710cdd4f10a70e626

    • SHA512

      16ea5044f968187108ec48ddbff667527b1d3d5edc3961c8d245952a2c685dbcdc0ca576ea53793d532bd53dea92721ffc79a8beb6329a1b363904f0a3c83f00

    • SSDEEP

      1536:dcObJoSF+cJuGmqvb9xBwbAG2ukf2J1jVEyW:ea7VDBwbX2LujVEp

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks