Overview

overview

10

Static

static

SKBMT_ 58...ge.exe

windows7_x64

10

SKBMT_ 58...ge.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SKBMT_ 5870Z904_ Image.exe
  • Size 376KB
  • Sample210223-xlnfcb7gl6
  • SHA256 2e5fa5d3014a67a660612edaddf0e5abf60d7b0f8b82336b17ab6464c4567d03
  • MD5 SHA1 SHA512
Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target
      SKBMT_ 5870Z904_ Image.exe
    • Size 376KB
    • SHA256 2e5fa5d3014a67a660612edaddf0e5abf60d7b0f8b82336b17ab6464c4567d03
    • MD5 SHA1 SHA512
    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Beds Protector Packer

      Detects Beds Protector packer used to load .NET malware.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks