e7cddae953978be6b45011ccbde76cc209eb1bfb3976ba9e214a37df62e3e145
General
Target
Size
Sample
e7cddae953978be6b45011ccbde76cc209eb1bfb3976ba9e214a37df62e3e145
496KB
220521-xxmkfscge2
Score
10 /10
MD5
SHA1
SHA256
SHA512
2e949fbd641fbb0b7a2faa128ddd3540
eac22a028a62c18391a452850d9c42fbb19b7fb8
e7cddae953978be6b45011ccbde76cc209eb1bfb3976ba9e214a37df62e3e145
93d326fc1f0bdace236773275b0969dc191e98979e6f353567bf8ca5479773bf8c811dd9b292136a6a1f2aa0999988c79567ef41f75dde5243ebd628582c1d78
Malware Config
Targets
Target
MD5
Filesize
e7cddae953978be6b45011ccbde76cc209eb1bfb3976ba9e214a37df62e3e145
2e949fbd641fbb0b7a2faa128ddd3540
496KB
Score
10/10
SHA1
SHA256
SHA512
eac22a028a62c18391a452850d9c42fbb19b7fb8
e7cddae953978be6b45011ccbde76cc209eb1bfb3976ba9e214a37df62e3e145
93d326fc1f0bdace236773275b0969dc191e98979e6f353567bf8ca5479773bf8c811dd9b292136a6a1f2aa0999988c79567ef41f75dde5243ebd628582c1d78
Tags
Signatures
-
NetWire RAT payload
-
Netwire
Description
Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
Tags
-
Modifies Installed Components in the registry
Tags
TTPs
-
Adds Run key to start application
Tags
TTPs
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks