Overview

overview

10

Static

static

10

570b4730da...39.exe

windows7_x64

10

570b4730da...39.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    99s
  • max time network
    115s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    01-07-2022 03:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    570b4730da20855afa729603fa2ee7d986b543fc9cdd857b0fc21cdf2ffe5539.exe

  • Size

    127KB

  • MD5

    d8d0160849303575f995ce67af0b5df5

  • SHA1

    5d00a2819c01cbf08e2ec66c6bbfd6211dec9929

  • SHA256

    570b4730da20855afa729603fa2ee7d986b543fc9cdd857b0fc21cdf2ffe5539

  • SHA512

    d6348ec4983792c1291832e00d28deae8289a2a2569d24804b7123cd0789f3f4537b5f035cbc43eeb3ed5d222c6df8e3783ad492e1f8e09166f699696c9334aa

Score
10/10
netwirebotnetstealer

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

Processes

  • C:\Users\Admin\AppData\Local\Temp\570b4730da20855afa729603fa2ee7d986b543fc9cdd857b0fc21cdf2ffe5539.exe
    "C:\Users\Admin\AppData\Local\Temp\570b4730da20855afa729603fa2ee7d986b543fc9cdd857b0fc21cdf2ffe5539.exe"
    1⤵
      PID:1512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1512-54-0x0000000076421000-0x0000000076423000-memory.dmp

      Filesize

      8KB

      Download