General
-
Target
8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe
-
Size
98KB
-
Sample
240601-ddewqafd51
-
MD5
8abb6b8dbe611ceba61027fc0b3a5c70
-
SHA1
9246f4aad385e9de7ca6bdc198d83fc5be7e0141
-
SHA256
df836d1a7d4978570ac98b09b91506057186ed7b55ac9f9d119ce263ca19c6a5
-
SHA512
c4a492145b188323e1f6ac274f567ea98e8de5173d84675c8bfe820c6a9eb188ed710e7f457741b6c0c8441d80375e1d70db90e67d2107ab28fbd7f0e6afb34b
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocD9F1jVEyO:GxD6jSm0uWRfCowFjVEJ
Behavioral task
behavioral1
Sample
8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
warzonerat
wealth.warzonedns.com:5202
Targets
-
-
Target
8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe
-
Size
98KB
-
MD5
8abb6b8dbe611ceba61027fc0b3a5c70
-
SHA1
9246f4aad385e9de7ca6bdc198d83fc5be7e0141
-
SHA256
df836d1a7d4978570ac98b09b91506057186ed7b55ac9f9d119ce263ca19c6a5
-
SHA512
c4a492145b188323e1f6ac274f567ea98e8de5173d84675c8bfe820c6a9eb188ed710e7f457741b6c0c8441d80375e1d70db90e67d2107ab28fbd7f0e6afb34b
-
SSDEEP
1536:LCsijmb+6BQyusX1UjtA0uWRf/elocD9F1jVEyO:GxD6jSm0uWRfCowFjVEJ
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-