Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
25075ad4b08d98b621c831336e72e1e0_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240527-jbremadd23
-
MD5
25075ad4b08d98b621c831336e72e1e0
-
SHA1
3eef74d716c47547739905aa9c95fdafa1b13032
-
SHA256
01ba34a39586e99f12eec60eb6cc2b4554e38dbb26257ced2756ab4ac02505da
-
SHA512
01b838745c40eeff987b8f75d18075aad0da461d7b4c834e1d17f8d3cd7b8f35957fcc27605ee4fdddffc24555b26393241e5fa7e529c10b3b671e3776d7faaa
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocms9F1jVEyH:GxD6jSm0uWRfCo5sFjVEI
Behavioral task
behavioral1
Sample
25075ad4b08d98b621c831336e72e1e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25075ad4b08d98b621c831336e72e1e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
25075ad4b08d98b621c831336e72e1e0_NeikiAnalytics.exe
-
Size
98KB
-
MD5
25075ad4b08d98b621c831336e72e1e0
-
SHA1
3eef74d716c47547739905aa9c95fdafa1b13032
-
SHA256
01ba34a39586e99f12eec60eb6cc2b4554e38dbb26257ced2756ab4ac02505da
-
SHA512
01b838745c40eeff987b8f75d18075aad0da461d7b4c834e1d17f8d3cd7b8f35957fcc27605ee4fdddffc24555b26393241e5fa7e529c10b3b671e3776d7faaa
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocms9F1jVEyH:GxD6jSm0uWRfCo5sFjVEI
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-