General
-
Target
4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240526-ch2qlsbf96
-
MD5
4f1e9378fc504f0cfadd5bb05519d490
-
SHA1
9acc6f6e835ef70e09311317654c3f06e020f765
-
SHA256
1f6996122e1a2a53686d87703e9a687cc89efa2fc38b6a4a762b727062b76edc
-
SHA512
4808eca5fcbe4e32e7db1dd6f4c42cc9df06b4c7615095822055c3b76a6a9617bf3f64b8f228f132f358593eb4d5184014562a523e25d902bd49fe803bd61af6
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcxF11jVEy2:mpjZ+cJBSYydjVE1
Behavioral task
behavioral1
Sample
4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe
-
Size
98KB
-
MD5
4f1e9378fc504f0cfadd5bb05519d490
-
SHA1
9acc6f6e835ef70e09311317654c3f06e020f765
-
SHA256
1f6996122e1a2a53686d87703e9a687cc89efa2fc38b6a4a762b727062b76edc
-
SHA512
4808eca5fcbe4e32e7db1dd6f4c42cc9df06b4c7615095822055c3b76a6a9617bf3f64b8f228f132f358593eb4d5184014562a523e25d902bd49fe803bd61af6
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcxF11jVEy2:mpjZ+cJBSYydjVE1
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-