Analysis

  • max time kernel
    97s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    01-07-2022 06:51

General

  • Target

    67349f5ab9898c358616f3e9640430a093fb7e705d08bb4641f53202dc9e3bdc.exe

  • Size

    106KB

  • MD5

    4eee7e0c0a4ac3672e2138dd4f9c09f2

  • SHA1

    6ca817d16043c8faeb695cbbdff77e943e9d1020

  • SHA256

    67349f5ab9898c358616f3e9640430a093fb7e705d08bb4641f53202dc9e3bdc

  • SHA512

    be2b58793da340cb12ce19b18d04efdc2e1c6003e490e4b25df02f9fcfc30c763d486403e4ded0b9edf6acc5500827a971f1c97167f927fe0575ab9bc2e1f6a3

Score
10/10

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Processes

  • C:\Users\Admin\AppData\Local\Temp\67349f5ab9898c358616f3e9640430a093fb7e705d08bb4641f53202dc9e3bdc.exe
    "C:\Users\Admin\AppData\Local\Temp\67349f5ab9898c358616f3e9640430a093fb7e705d08bb4641f53202dc9e3bdc.exe"
    1⤵
      PID:884

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/884-54-0x0000000075801000-0x0000000075803000-memory.dmp
      Filesize

      8KB