General
-
Target
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e
-
Size
640KB
-
Sample
220520-esvq6acbbk
-
MD5
5758763dd5c7ebfb3508e8219cb5548a
-
SHA1
e7ecc9586586bc64ee04cd6da398f05bf222ae38
-
SHA256
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e
-
SHA512
ab131b6d11f91be2df59201b817bb4f1bd6b35924881082fbb35840278ab6a3c927050a6ba1d26c09e892593b1fb0322f6e8ee5b7407492d8ba99ec220120f6c
Static task
static1
Behavioral task
behavioral1
Sample
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e
-
Size
640KB
-
MD5
5758763dd5c7ebfb3508e8219cb5548a
-
SHA1
e7ecc9586586bc64ee04cd6da398f05bf222ae38
-
SHA256
fda4b6acd7c4277dc30ed516c360957a931043c6881de0eab69c77ab217a254e
-
SHA512
ab131b6d11f91be2df59201b817bb4f1bd6b35924881082fbb35840278ab6a3c927050a6ba1d26c09e892593b1fb0322f6e8ee5b7407492d8ba99ec220120f6c
Score10/10-
NetWire RAT payload
-
Executes dropped EXE
-
Modifies Installed Components in the registry
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-