General

  • Target

    2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240528-df7dradd65

  • MD5

    2f104df4de06c90cbcd20b71f9d588f0

  • SHA1

    94faf4c4de1aa535e24eaec617c1db32aeed33ad

  • SHA256

    1f0c054f400bd99ec3fdbd79e3c477fc7cb54e72c14bcf1f48cd04aba1fb1236

  • SHA512

    457c2a2c4dab432490dab63bae34e19f55e56f804b554aaf623e06e85344816a9bbcded42e42d0f6977723d7da1796704fb6929ea1d484db29f9e480c8214f03

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEy/:GxD6jSm0uWRfCoeHFjVEk

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      2f104df4de06c90cbcd20b71f9d588f0_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      2f104df4de06c90cbcd20b71f9d588f0

    • SHA1

      94faf4c4de1aa535e24eaec617c1db32aeed33ad

    • SHA256

      1f0c054f400bd99ec3fdbd79e3c477fc7cb54e72c14bcf1f48cd04aba1fb1236

    • SHA512

      457c2a2c4dab432490dab63bae34e19f55e56f804b554aaf623e06e85344816a9bbcded42e42d0f6977723d7da1796704fb6929ea1d484db29f9e480c8214f03

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/eloc7H9F1jVEy/:GxD6jSm0uWRfCoeHFjVEk

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks