Behavioral task
behavioral1
Sample
Host.bin.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Host.bin.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
Host.bin.zip
-
Size
80KB
-
MD5
0c1ac431568600c6704f3b4b30d004cd
-
SHA1
972bcb4c0d6cdcb3e84b6f99f30ca7b02c252280
-
SHA256
69bf0ef8f8c709088f0419cbf424fbba4c0b35d12af2e909718614618c0ce435
-
SHA512
981d324e5420a9d20a685df6f3e7caa5fcf226c225cbd94d953eff4d226aa80e7dc105480ea8dca20675e86e7c9a77a4a5b80fcfba67be098fa81d03be41a898
Malware Config
Extracted
Family
netwire
C2
82.156.233.85:80
Attributes
-
activex_autorun
false
- activex_key
-
copy_executable
true
-
delete_original
true
-
host_id
HostId-%Rand%
-
install_path
%AppData%\Install\Host.exe
- keylogger_dir
-
lock_executable
true
- mutex
-
offline_keylogger
false
-
password
bupt
-
registry_autorun
true
-
startup_name
NetWire
-
use_mutex
false
Signatures
Files
-
Host.bin.zip.zip
Password: infected
-
Host.bin.exe windows x86