Analysis

  • max time kernel
    2s
  • max time network
    170s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    30-06-2021 10:17

General

  • Target

    F27164CA71AB7C3F37423A20D80B82C4.exe

  • Size

    160KB

  • MD5

    f27164ca71ab7c3f37423a20d80b82c4

  • SHA1

    234f4c22fc1e435effd208c3b8276f8e65299e57

  • SHA256

    ef9d94b683a4354982f31afb73185d5d47d50b908168b0e612f7895eb4e0d757

  • SHA512

    48be2da1096409aa387294b49dc3d61cee4c15f242c9f148cb062c925f0072ea814046f7c6ac1e4eb3f95f53d8dca131d48e0cdbb1fee3abd7bac46aba3c52b9

Score
10/10

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Processes

  • C:\Users\Admin\AppData\Local\Temp\F27164CA71AB7C3F37423A20D80B82C4.exe
    "C:\Users\Admin\AppData\Local\Temp\F27164CA71AB7C3F37423A20D80B82C4.exe"
    1⤵
      PID:2020

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2020-59-0x0000000075D41000-0x0000000075D43000-memory.dmp
      Filesize

      8KB