General

  • Target

    4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe

  • Size

    98KB

  • MD5

    4f1e9378fc504f0cfadd5bb05519d490

  • SHA1

    9acc6f6e835ef70e09311317654c3f06e020f765

  • SHA256

    1f6996122e1a2a53686d87703e9a687cc89efa2fc38b6a4a762b727062b76edc

  • SHA512

    4808eca5fcbe4e32e7db1dd6f4c42cc9df06b4c7615095822055c3b76a6a9617bf3f64b8f228f132f358593eb4d5184014562a523e25d902bd49fe803bd61af6

  • SSDEEP

    1536:7CsqDw2ost58PNkDtPMpcJBO9YcxF11jVEy2:mpjZ+cJBSYydjVE1

Score
10/10

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f1e9378fc504f0cfadd5bb05519d490_NeikiAnalytics.exe
    .exe windows:5 windows x86 arch:x86

    b76aafdc988ade2ab3db3b02fa4c6d00


    Headers

    Imports

    Sections