Overview

overview

10

Static

static

Begantoda[1].exe

windows7_x64

10

Begantoda[1].exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Begantoda[1].exe

  • Size

    586KB

  • Sample

    210303-7s14my2p2j

  • MD5

    b4ff2825679835badd44aaa15256638c

  • SHA1

    f67f7fac7368250b8df4d0a9b05408f775fe5f9c

  • SHA256

    691f3e4b532cb3802630762dadc0eb5f894a6b5463ab5723ef67379ef3f9d31f

  • SHA512

    33339d4ca2687a802ae61679bba672f926020fb319794e84bbdc84c3e68c744b8e241784f2ae5daa08ac78f58ca570539cd1ba446ec3ee4315c032937369db5a

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      Begantoda[1].exe

    • Size

      586KB

    • MD5

      b4ff2825679835badd44aaa15256638c

    • SHA1

      f67f7fac7368250b8df4d0a9b05408f775fe5f9c

    • SHA256

      691f3e4b532cb3802630762dadc0eb5f894a6b5463ab5723ef67379ef3f9d31f

    • SHA512

      33339d4ca2687a802ae61679bba672f926020fb319794e84bbdc84c3e68c744b8e241784f2ae5daa08ac78f58ca570539cd1ba446ec3ee4315c032937369db5a

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks