General
-
Target
61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240526-epwt2sfb22
-
MD5
61ec8a54ff8589f86537fa84f70aa560
-
SHA1
f83c4854d6fe15283fa4fb1ba47f341bb3bd9ac7
-
SHA256
add078eff0e19d2f9e968a10af976c4364ab3ff4b29acef76aa03918ecfa77a8
-
SHA512
c8964e778dd9257883399b7e22604dfe4df354155840e9f2da3285e0e2668a636a79dd7052c9b67ba5260adacc7b65babb6b5e0bd3a88f1515b9c30a7ec94417
-
SSDEEP
1536:risSjIbaI3wMHFUDNwtEcU9xMRt1I8+tl1jVEyT:GBjmsWEhxMFIBVjVE0
Behavioral task
behavioral1
Sample
61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
61ec8a54ff8589f86537fa84f70aa560_NeikiAnalytics.exe
-
Size
98KB
-
MD5
61ec8a54ff8589f86537fa84f70aa560
-
SHA1
f83c4854d6fe15283fa4fb1ba47f341bb3bd9ac7
-
SHA256
add078eff0e19d2f9e968a10af976c4364ab3ff4b29acef76aa03918ecfa77a8
-
SHA512
c8964e778dd9257883399b7e22604dfe4df354155840e9f2da3285e0e2668a636a79dd7052c9b67ba5260adacc7b65babb6b5e0bd3a88f1515b9c30a7ec94417
-
SSDEEP
1536:risSjIbaI3wMHFUDNwtEcU9xMRt1I8+tl1jVEyT:GBjmsWEhxMFIBVjVE0
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-