General

  • Target

    73888493b43315d361df38a770187080_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240531-czrlzadb49

  • MD5

    73888493b43315d361df38a770187080

  • SHA1

    a4f82ab969e4d46429d9c1b7ab6e02f70e298f8a

  • SHA256

    653274e6f0a8d9b8ea1a57179591f9ccf4b4cfdbc3a76741a6647a6078387f99

  • SHA512

    264b261830ba077ecdc4eee2709a07b91389f2f31a2ca3f6e7fdd843f55f7ed1f24fc7e6eeeaac50f409b2630d088c469c484512fb051cccfeba3731eab77067

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/elocM9F1jVEyh:GxD6jSm0uWRfCoLFjVE+

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      73888493b43315d361df38a770187080_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      73888493b43315d361df38a770187080

    • SHA1

      a4f82ab969e4d46429d9c1b7ab6e02f70e298f8a

    • SHA256

      653274e6f0a8d9b8ea1a57179591f9ccf4b4cfdbc3a76741a6647a6078387f99

    • SHA512

      264b261830ba077ecdc4eee2709a07b91389f2f31a2ca3f6e7fdd843f55f7ed1f24fc7e6eeeaac50f409b2630d088c469c484512fb051cccfeba3731eab77067

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/elocM9F1jVEyh:GxD6jSm0uWRfCoLFjVE+

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks