Overview

overview

10

Static

static

doc_8865485.exe

windows7_x64

10

doc_8865485.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4184f9002f49984bf72ce7ad2db7a83f8c1a5d6777adbcee59d040486e959adc

  • Size

    290KB

  • Sample

    220708-f6q6kabcfl

  • MD5

    434ebd3805315c2dfc4f917063e12a11

  • SHA1

    3d03946e9f0bfdb1798935c4ff9ee7b346d60472

  • SHA256

    4184f9002f49984bf72ce7ad2db7a83f8c1a5d6777adbcee59d040486e959adc

  • SHA512

    c2d8d5556bae29e42d372916774fcf598363359cf82f23f519ca8ca504d178fa0661efa5d992f51587789267791476688f58d0bf468094ed8380790983a2a0eb

Score
10/10
netwirebotnetstealer

Malware Config

Targets

    • Target

      doc_8865485.exe

    • Size

      369KB

    • MD5

      5a517bc9ff56af55357285e11e438472

    • SHA1

      ec7aff896cac0404150c8af050f332b4402991b1

    • SHA256

      ed6f8a115c64001782d1f74f5172e6cc62851d823589f5d09f0a474db0f6f50a

    • SHA512

      eea9cd71d2cc10f86c71ef9612f1ec5f80c1baa1723120622545e99ee540db6bfb0d790fdd9751612b20dd762f98763cabf6795ef49d80122ac029ee6ee2bd38

    Score
    10/10
    netwirebotnetstealer

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks