General

  • Target

    bde69526989ccb68ab401f2efa45b310_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240526-x81lfshc3v

  • MD5

    bde69526989ccb68ab401f2efa45b310

  • SHA1

    f70011e9c649b82b6325d787bd1e104d73c91c18

  • SHA256

    1450aa2641b4bff199b959ea0e8e57de0b533018862d5b046f833da38074e266

  • SHA512

    ed4529a61368f2b8fdcca6ddde45542e5ed79ec317da17264a235f7cc90f78f27172e1fb4e73fc57f0dcac1eb989e00aef1996f5065725e58e05f671eef7bd7c

  • SSDEEP

    1536:v0mbdHkfWbUfG7traTrWKEb3HS3Z7fYuZmOei9z4P51jVEy5:cuWW0Kt2rWH2Z7pZmhi1+TjVEG

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      bde69526989ccb68ab401f2efa45b310_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      bde69526989ccb68ab401f2efa45b310

    • SHA1

      f70011e9c649b82b6325d787bd1e104d73c91c18

    • SHA256

      1450aa2641b4bff199b959ea0e8e57de0b533018862d5b046f833da38074e266

    • SHA512

      ed4529a61368f2b8fdcca6ddde45542e5ed79ec317da17264a235f7cc90f78f27172e1fb4e73fc57f0dcac1eb989e00aef1996f5065725e58e05f671eef7bd7c

    • SSDEEP

      1536:v0mbdHkfWbUfG7traTrWKEb3HS3Z7fYuZmOei9z4P51jVEy5:cuWW0Kt2rWH2Z7pZmhi1+TjVEG

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks