Overview

overview

10

Static

static

10

netwire paylaod.exe

windows7_x64

10

netwire paylaod.exe

windows10_x64

10

Analysis

  • max time kernel
    39s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7v200430
  • submitted
    14-07-2020 13:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    netwire paylaod.exe

  • Size

    161KB

  • MD5

    0ad100b03f84337a6ec0ae7fe4f9076d

  • SHA1

    1496c4f97f690c3b488e9d5bec53acd74d024584

  • SHA256

    f4d8ebccd809868b63410f61d84bf12e9642f7eb015b6480610e9505da186067

  • SHA512

    a70f292bc724403ded87a42c29aa19faf05e1d2c436ae20df12ede2dd5f568a3bc6097e11cd4008c23d2240d3fb7c4a8776b053d7939920163aa49a91cb66174

Score
10/10
botnetstealernetwire

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

Processes

  • C:\Users\Admin\AppData\Local\Temp\netwire paylaod.exe
    "C:\Users\Admin\AppData\Local\Temp\netwire paylaod.exe"
    1⤵
      PID:1388

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads