Overview

overview

10

Static

static

e45b917d7b...b6.exe

windows7_x64

10

e45b917d7b...b6.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e45b917d7b153fa59545b2cbb3c6437d5820aa80b5718946df1bd10401ea39b6
  • Size 284KB
  • Sample220219-lc6xtaach7
  • SHA256 e45b917d7b153fa59545b2cbb3c6437d5820aa80b5718946df1bd10401ea39b6
  • MD5 SHA1 SHA512
Score
10/10
netwirebotnetpersistenceratstealer

Malware Config

Targets

    • Target
      e45b917d7b153fa59545b2cbb3c6437d5820aa80b5718946df1bd10401ea39b6
    • Size 284KB
    • SHA256 e45b917d7b153fa59545b2cbb3c6437d5820aa80b5718946df1bd10401ea39b6
    • MD5 SHA1 SHA512
    Score
    10/10
    netwirebotnetpersistenceratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Modifies Installed Components in the registry

      persistence

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks