General
-
Target
73888493b43315d361df38a770187080_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240531-czrlzadb49
-
MD5
73888493b43315d361df38a770187080
-
SHA1
a4f82ab969e4d46429d9c1b7ab6e02f70e298f8a
-
SHA256
653274e6f0a8d9b8ea1a57179591f9ccf4b4cfdbc3a76741a6647a6078387f99
-
SHA512
264b261830ba077ecdc4eee2709a07b91389f2f31a2ca3f6e7fdd843f55f7ed1f24fc7e6eeeaac50f409b2630d088c469c484512fb051cccfeba3731eab77067
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocM9F1jVEyh:GxD6jSm0uWRfCoLFjVE+
Behavioral task
behavioral1
Sample
73888493b43315d361df38a770187080_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
73888493b43315d361df38a770187080_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
73888493b43315d361df38a770187080_NeikiAnalytics.exe
-
Size
98KB
-
MD5
73888493b43315d361df38a770187080
-
SHA1
a4f82ab969e4d46429d9c1b7ab6e02f70e298f8a
-
SHA256
653274e6f0a8d9b8ea1a57179591f9ccf4b4cfdbc3a76741a6647a6078387f99
-
SHA512
264b261830ba077ecdc4eee2709a07b91389f2f31a2ca3f6e7fdd843f55f7ed1f24fc7e6eeeaac50f409b2630d088c469c484512fb051cccfeba3731eab77067
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocM9F1jVEyh:GxD6jSm0uWRfCoLFjVE+
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-