warzonerat | 568492459c6bcca3ac14b3c199953790_NeikiAnalytics[.]exe

General

Target

568492459c6bcca3ac14b3c199953790_NeikiAnalytics.exe
Size

2.9MB
MD5

568492459c6bcca3ac14b3c199953790
SHA1

e25a3a631715c8a4274beb34e7e8b8d86f32b153
SHA256

47310f6323cf57d5bed3a4b3975a951b9aad2ed4eff98ab55fa2ef7389790543
SHA512

0e15ca4b041dd762c4448f16b3d3aae296cd0cdb7d402a1442ec6600839035e1b8735e481af4cba9bae5b842be304c75df4ad91961aa003b03a589d33c90669d
SSDEEP

24576:ATU7AAmZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH/:ATU7AAmw4gxeOw46fUbNecCCFbNecQ

Score

10^/10

rat upx warzonerat

Warzone RAT payload 1 IoCs
rat

Processes:

resource yara_rule

sample warzonerat
Warzonerat family
warzonerat
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	warzonerat

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
568492459c6bcca3ac14b3c199953790_NeikiAnalytics.exe