Overview

overview

10

Static

static

5

5a9dc7a0a7...9f.exe

windows7_x64

10

5a9dc7a0a7...9f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a9dc7a0a78582178b5ecc4b83725338027de4ec8d68ccf2f22ea6e92aab509f

  • Size

    1.2MB

  • Sample

    220701-sfgknaahf7

  • MD5

    003d19970194080b5cf4943b45ffb523

  • SHA1

    d1215cc8a501c297157ca4d44bc683f95c747f86

  • SHA256

    5a9dc7a0a78582178b5ecc4b83725338027de4ec8d68ccf2f22ea6e92aab509f

  • SHA512

    62f69b3c5eaf138b7ed3c30b1e9b79b2ff4fec9d17f537d2f4fc5cd6fe3d775244df6c9449df2ad1694207de1310be0d3ff875ddae73cb8b9c0f5379f8a9a217

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      5a9dc7a0a78582178b5ecc4b83725338027de4ec8d68ccf2f22ea6e92aab509f

    • Size

      1.2MB

    • MD5

      003d19970194080b5cf4943b45ffb523

    • SHA1

      d1215cc8a501c297157ca4d44bc683f95c747f86

    • SHA256

      5a9dc7a0a78582178b5ecc4b83725338027de4ec8d68ccf2f22ea6e92aab509f

    • SHA512

      62f69b3c5eaf138b7ed3c30b1e9b79b2ff4fec9d17f537d2f4fc5cd6fe3d775244df6c9449df2ad1694207de1310be0d3ff875ddae73cb8b9c0f5379f8a9a217

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks