General

  • Target

    5a5c2c503f5dfc7b903be5a8f03518d1a33faa0c95d8cde2370b6557ff4e8896

  • Size

    636KB

  • Sample

    220217-dwwxyshfdn

  • MD5

    37686af4853852e7b2dcfcb7e9a3908d

  • SHA1

    52504dec5236a67e22d78d4d3ecbe946c2a12c4e

  • SHA256

    5a5c2c503f5dfc7b903be5a8f03518d1a33faa0c95d8cde2370b6557ff4e8896

  • SHA512

    bfcf48bc6b6f97df0750ddcd88b6fa4de0ea922ee7ed771f8d93e1eda275eb8135d6e2763595686e2ed5053e6f321f2e31186084f5b880f5c6e17083b3028c85

Malware Config

Targets

    • Target

      5a5c2c503f5dfc7b903be5a8f03518d1a33faa0c95d8cde2370b6557ff4e8896

    • Size

      636KB

    • MD5

      37686af4853852e7b2dcfcb7e9a3908d

    • SHA1

      52504dec5236a67e22d78d4d3ecbe946c2a12c4e

    • SHA256

      5a5c2c503f5dfc7b903be5a8f03518d1a33faa0c95d8cde2370b6557ff4e8896

    • SHA512

      bfcf48bc6b6f97df0750ddcd88b6fa4de0ea922ee7ed771f8d93e1eda275eb8135d6e2763595686e2ed5053e6f321f2e31186084f5b880f5c6e17083b3028c85

    • NetWire RAT payload

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks