netwire | 962c56ec4b5c877da762c9f95ea2aa1bffbf34f9615b3a9df8d53cec75c434bb | Triage

Sharing

General

Target

962c56ec4b5c877da762c9f95ea2aa1bffbf34f9615b3a9df8d53cec75c434bb
Size

127KB
Sample

220701-hlf6zagefl
MD5

c45bedf2bd458697c71a854c74e474f2
SHA1

5f24b352f14def8d0aef90cdda4ff88c58f7ccbd
SHA256

962c56ec4b5c877da762c9f95ea2aa1bffbf34f9615b3a9df8d53cec75c434bb
SHA512

f303065611b0c798773403e915427d39d689487f437131aff580314032b977e60436f689a4ac909c1f93ddab05b9ffc39cddef51714b744c726c48393a59ec23

Score

10^/10

netwire botnet persistence rat stealer

Malware Config

Targets

- Target
  
  962c56ec4b5c877da762c9f95ea2aa1bffbf34f9615b3a9df8d53cec75c434bb
- Size
  
  127KB
- MD5
  
  c45bedf2bd458697c71a854c74e474f2
- SHA1
  
  5f24b352f14def8d0aef90cdda4ff88c58f7ccbd
- SHA256
  
  962c56ec4b5c877da762c9f95ea2aa1bffbf34f9615b3a9df8d53cec75c434bb
- SHA512
  
  f303065611b0c798773403e915427d39d689487f437131aff580314032b977e60436f689a4ac909c1f93ddab05b9ffc39cddef51714b744c726c48393a59ec23
Score

10^/10

netwire botnet persistence stealer
- Netwire
  Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
  botnet stealer netwire
- Modifies Installed Components in the registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

netwirebotnetpersistencestealer

behavioral2

netwirebotnetpersistencestealer