General

  • Target

    617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240526-enk16aec9y

  • MD5

    617d09865b94eb48cfd9c18decd514c0

  • SHA1

    7bb5ec8c2511a8a8726b6d6d1b5a85950c5774e5

  • SHA256

    38331f65aa09b948c12c5bd1de6e8e19e313d0efb8150a3b2ae9248d863f57a8

  • SHA512

    20267cad3e256cc0b433da0bb94d03b5d430ad09931e07cbaa5bbe72662f42d4b9b9ef7f87319ace0813b0812e6223de0ca250c8140435dd53568beff8c8f419

  • SSDEEP

    1536:7CsqDw2ost58PNkDtPMpcJBO9YcFF11jVEyB:mpjZ+cJBSYCdjVEq

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      617d09865b94eb48cfd9c18decd514c0

    • SHA1

      7bb5ec8c2511a8a8726b6d6d1b5a85950c5774e5

    • SHA256

      38331f65aa09b948c12c5bd1de6e8e19e313d0efb8150a3b2ae9248d863f57a8

    • SHA512

      20267cad3e256cc0b433da0bb94d03b5d430ad09931e07cbaa5bbe72662f42d4b9b9ef7f87319ace0813b0812e6223de0ca250c8140435dd53568beff8c8f419

    • SSDEEP

      1536:7CsqDw2ost58PNkDtPMpcJBO9YcFF11jVEyB:mpjZ+cJBSYCdjVEq

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks