General
-
Target
617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240526-enk16aec9y
-
MD5
617d09865b94eb48cfd9c18decd514c0
-
SHA1
7bb5ec8c2511a8a8726b6d6d1b5a85950c5774e5
-
SHA256
38331f65aa09b948c12c5bd1de6e8e19e313d0efb8150a3b2ae9248d863f57a8
-
SHA512
20267cad3e256cc0b433da0bb94d03b5d430ad09931e07cbaa5bbe72662f42d4b9b9ef7f87319ace0813b0812e6223de0ca250c8140435dd53568beff8c8f419
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcFF11jVEyB:mpjZ+cJBSYCdjVEq
Behavioral task
behavioral1
Sample
617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
617d09865b94eb48cfd9c18decd514c0_NeikiAnalytics.exe
-
Size
98KB
-
MD5
617d09865b94eb48cfd9c18decd514c0
-
SHA1
7bb5ec8c2511a8a8726b6d6d1b5a85950c5774e5
-
SHA256
38331f65aa09b948c12c5bd1de6e8e19e313d0efb8150a3b2ae9248d863f57a8
-
SHA512
20267cad3e256cc0b433da0bb94d03b5d430ad09931e07cbaa5bbe72662f42d4b9b9ef7f87319ace0813b0812e6223de0ca250c8140435dd53568beff8c8f419
-
SSDEEP
1536:7CsqDw2ost58PNkDtPMpcJBO9YcFF11jVEyB:mpjZ+cJBSYCdjVEq
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-