Overview

overview

10

Static

static

10

4f1e9378fc...cs.exe

windows7-x64

10

4f1e9378fc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240526-ch2qlsbf96

  • MD5

    4f1e9378fc504f0cfadd5bb05519d490

  • SHA1

    9acc6f6e835ef70e09311317654c3f06e020f765

  • SHA256

    1f6996122e1a2a53686d87703e9a687cc89efa2fc38b6a4a762b727062b76edc

  • SHA512

    4808eca5fcbe4e32e7db1dd6f4c42cc9df06b4c7615095822055c3b76a6a9617bf3f64b8f228f132f358593eb4d5184014562a523e25d902bd49fe803bd61af6

  • SSDEEP

    1536:7CsqDw2ost58PNkDtPMpcJBO9YcxF11jVEy2:mpjZ+cJBSYydjVE1

Score
10/10
warzoneratinfostealerrat

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      4f1e9378fc504f0cfadd5bb05519d490

    • SHA1

      9acc6f6e835ef70e09311317654c3f06e020f765

    • SHA256

      1f6996122e1a2a53686d87703e9a687cc89efa2fc38b6a4a762b727062b76edc

    • SHA512

      4808eca5fcbe4e32e7db1dd6f4c42cc9df06b4c7615095822055c3b76a6a9617bf3f64b8f228f132f358593eb4d5184014562a523e25d902bd49fe803bd61af6

    • SSDEEP

      1536:7CsqDw2ost58PNkDtPMpcJBO9YcxF11jVEy2:mpjZ+cJBSYydjVE1

    Score
    10/10
    warzoneratinfostealerrat

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks