General
-
Target
849684689850c5c2966545101f9502544c2d69b71db493d3a6a8b30460d68e82
-
Size
160KB
-
MD5
b986b09d78ae8fa69c46a83c30e76232
-
SHA1
5f30fc30a06b8eb145240617200c936f8f9efc07
-
SHA256
849684689850c5c2966545101f9502544c2d69b71db493d3a6a8b30460d68e82
-
SHA512
cc009e0622cc4a104d021b9d759d9609e4f45de4fe89565ab9fc9b29de190e4a07058bf8bae7ec5b7d1cdd089a143fe7bffff904091f6cdba6b741725d0ac998
Score
10/10
Malware Config
Extracted
Family
netwire
C2
bazerasedazacnetw139.xyz:2010
Attributes
-
activex_autorun
false
- activex_key
-
copy_executable
false
-
delete_original
false
-
host_id
Diabolikk66
- install_path
- keylogger_dir
-
lock_executable
false
-
mutex
CPsxxpUm
-
offline_keylogger
false
-
password
Ildiablo9012
-
registry_autorun
false
- startup_name
-
use_mutex
true
Signatures
-
NetWire RAT payload 1 IoCs
-
Netwire family
Files
-
849684689850c5c2966545101f9502544c2d69b71db493d3a6a8b30460d68e82