General

  • Target

    61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240526-epwt2sfb22

  • MD5

    61ec8a54ff8589f86537fa84f70aa560

  • SHA1

    f83c4854d6fe15283fa4fb1ba47f341bb3bd9ac7

  • SHA256

    add078eff0e19d2f9e968a10af976c4364ab3ff4b29acef76aa03918ecfa77a8

  • SHA512

    c8964e778dd9257883399b7e22604dfe4df354155840e9f2da3285e0e2668a636a79dd7052c9b67ba5260adacc7b65babb6b5e0bd3a88f1515b9c30a7ec94417

  • SSDEEP

    1536:risSjIbaI3wMHFUDNwtEcU9xMRt1I8+tl1jVEyT:GBjmsWEhxMFIBVjVE0

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      61ec8a54ff8589f86537fa84f70aa560

    • SHA1

      f83c4854d6fe15283fa4fb1ba47f341bb3bd9ac7

    • SHA256

      add078eff0e19d2f9e968a10af976c4364ab3ff4b29acef76aa03918ecfa77a8

    • SHA512

      c8964e778dd9257883399b7e22604dfe4df354155840e9f2da3285e0e2668a636a79dd7052c9b67ba5260adacc7b65babb6b5e0bd3a88f1515b9c30a7ec94417

    • SSDEEP

      1536:risSjIbaI3wMHFUDNwtEcU9xMRt1I8+tl1jVEyT:GBjmsWEhxMFIBVjVE0

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks