General
-
Target
822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics
-
Size
98KB
-
Sample
240531-2bx7aage33
-
MD5
822fe68adc29d401bbd7a02c20b6c150
-
SHA1
0ffc8cfa49feadff5241176136643e1ead813203
-
SHA256
301d992109e2aae983b23cac33f542e2352525457c59f8a354a03d03fb4bcef0
-
SHA512
e37a1cdc58a0d78ad1d19da3868b51cd097043aa2a1806e3a6ce25eae356d46adde3daea08c010ec7085d669abe8a8d66c056dc64086c22d30c0580c582f49e1
-
SSDEEP
1536:pASlJtTOFUGowSDxj3SPvcOJOiKy8E91jVEyN:eozpV3SPHJOq8wjVEC
Behavioral task
behavioral1
Sample
822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
822fe68adc29d401bbd7a02c20b6c150NeikiAnalytics_NeikiAnalytics
-
Size
98KB
-
MD5
822fe68adc29d401bbd7a02c20b6c150
-
SHA1
0ffc8cfa49feadff5241176136643e1ead813203
-
SHA256
301d992109e2aae983b23cac33f542e2352525457c59f8a354a03d03fb4bcef0
-
SHA512
e37a1cdc58a0d78ad1d19da3868b51cd097043aa2a1806e3a6ce25eae356d46adde3daea08c010ec7085d669abe8a8d66c056dc64086c22d30c0580c582f49e1
-
SSDEEP
1536:pASlJtTOFUGowSDxj3SPvcOJOiKy8E91jVEyN:eozpV3SPHJOq8wjVEC
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-