General
-
Target
2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240528-df7dradd65
-
MD5
2f104df4de06c90cbcd20b71f9d588f0
-
SHA1
94faf4c4de1aa535e24eaec617c1db32aeed33ad
-
SHA256
1f0c054f400bd99ec3fdbd79e3c477fc7cb54e72c14bcf1f48cd04aba1fb1236
-
SHA512
457c2a2c4dab432490dab63bae34e19f55e56f804b554aaf623e06e85344816a9bbcded42e42d0f6977723d7da1796704fb6929ea1d484db29f9e480c8214f03
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEy/:GxD6jSm0uWRfCoeHFjVEk
Behavioral task
behavioral1
Sample
2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe
-
Size
98KB
-
MD5
2f104df4de06c90cbcd20b71f9d588f0
-
SHA1
94faf4c4de1aa535e24eaec617c1db32aeed33ad
-
SHA256
1f0c054f400bd99ec3fdbd79e3c477fc7cb54e72c14bcf1f48cd04aba1fb1236
-
SHA512
457c2a2c4dab432490dab63bae34e19f55e56f804b554aaf623e06e85344816a9bbcded42e42d0f6977723d7da1796704fb6929ea1d484db29f9e480c8214f03
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEy/:GxD6jSm0uWRfCoeHFjVEk
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-