General

  • Target

    8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240601-ddewqafd51

  • MD5

    8abb6b8dbe611ceba61027fc0b3a5c70

  • SHA1

    9246f4aad385e9de7ca6bdc198d83fc5be7e0141

  • SHA256

    df836d1a7d4978570ac98b09b91506057186ed7b55ac9f9d119ce263ca19c6a5

  • SHA512

    c4a492145b188323e1f6ac274f567ea98e8de5173d84675c8bfe820c6a9eb188ed710e7f457741b6c0c8441d80375e1d70db90e67d2107ab28fbd7f0e6afb34b

  • SSDEEP

    1536:LCsijmb+6BQyusX1UjtA0uWRf/elocD9F1jVEyO:GxD6jSm0uWRfCowFjVEJ

Malware Config

Extracted

Family

warzonerat

C2

wealth.warzonedns.com:5202

Targets

    • Target

      8abb6b8dbe611ceba61027fc0b3a5c70_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      8abb6b8dbe611ceba61027fc0b3a5c70

    • SHA1

      9246f4aad385e9de7ca6bdc198d83fc5be7e0141

    • SHA256

      df836d1a7d4978570ac98b09b91506057186ed7b55ac9f9d119ce263ca19c6a5

    • SHA512

      c4a492145b188323e1f6ac274f567ea98e8de5173d84675c8bfe820c6a9eb188ed710e7f457741b6c0c8441d80375e1d70db90e67d2107ab28fbd7f0e6afb34b

    • SSDEEP

      1536:LCsijmb+6BQyusX1UjtA0uWRf/elocD9F1jVEyO:GxD6jSm0uWRfCowFjVEJ

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

MITRE ATT&CK Matrix

Tasks