General

  • Target

    06e6812b532aa2534c5e148ca2d680f65eaa9ab6a3ac495ab7f69bb74c2f6aec

  • Size

    397KB

  • Sample

    220520-rxyptsbefj

  • MD5

    36fbd9d44ef3f474f3eceaacf1658f96

  • SHA1

    f0e712ef5f4d39c042edcaa81c80132ac28c1f66

  • SHA256

    06e6812b532aa2534c5e148ca2d680f65eaa9ab6a3ac495ab7f69bb74c2f6aec

  • SHA512

    13b45710ec0313addac0a1831c4f642653e8ee85159d074f9f7c7564ee74374d740322260b890512abe61a1989da88748329ff4c50e8e40a7c403a25d3d69f5f

Score
10/10

Malware Config

Targets

    • Target

      Absa.exe

    • Size

      638KB

    • MD5

      3e6a8a40fd2a124f8c9a3bc25bcebe94

    • SHA1

      313a12b860281062c2842359e0d90c79695c5fa7

    • SHA256

      3434bb383c8dd721266f60e07820474205d70c5da9ebb465109ace7894567437

    • SHA512

      e87dbfb61459c039fd9d897c6bb468669d389074c28f701339c85c38193f76d501dee7825b2235785059a14df1a5949cc003732e55ef94b39b41205cdaab1338

    Score
    10/10
    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks