General

  • Target

    vmclang.exe

  • Size

    5.8MB

  • Sample

    201224-bgkg9ybmys

  • MD5

    023ae9c9494ea1d4c24dcbfe7892c611

  • SHA1

    2fff1f353cb6946d6f226050e710d4bc0cf4d16e

  • SHA256

    2c1cef7d208ce8f0094415d06cc61fa37dd9c9308cfcd9fde0f7a32703220e90

  • SHA512

    d2f1a3a1539a3e2359df28b274da3676718ccf2500ccceb8ed7e695d1e18b5344551b68a27c501c0ee4e0279f357b684ab1b04d3929357d6d478e26237e82d25

Malware Config

Targets

    • Target

      vmclang.exe

    • Size

      5.8MB

    • MD5

      023ae9c9494ea1d4c24dcbfe7892c611

    • SHA1

      2fff1f353cb6946d6f226050e710d4bc0cf4d16e

    • SHA256

      2c1cef7d208ce8f0094415d06cc61fa37dd9c9308cfcd9fde0f7a32703220e90

    • SHA512

      d2f1a3a1539a3e2359df28b274da3676718ccf2500ccceb8ed7e695d1e18b5344551b68a27c501c0ee4e0279f357b684ab1b04d3929357d6d478e26237e82d25

    • NetWire RAT payload

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

MITRE ATT&CK Matrix

Tasks