Analysis

  • max time kernel
    103s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    14-07-2022 03:57

General

  • Target

    483636b2da0135edc6eaeee2392674bc3c498271c534b4b7aac629c478901a5f.exe

  • Size

    128KB

  • MD5

    40b0cf1c5395d9ee4b252ee249773db1

  • SHA1

    40917ecc4654936ea7b11ee5c79e14fe1fa282f9

  • SHA256

    483636b2da0135edc6eaeee2392674bc3c498271c534b4b7aac629c478901a5f

  • SHA512

    7d5bcbfe338be2f9b262a70a2670ee61a6e107e7c840054697eced6bda4f6b1b3e49d07c395574dd3ea9acf63da0c4e518263fea334f0c6de6af043aecae074e

Score
10/10

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Processes

  • C:\Users\Admin\AppData\Local\Temp\483636b2da0135edc6eaeee2392674bc3c498271c534b4b7aac629c478901a5f.exe
    "C:\Users\Admin\AppData\Local\Temp\483636b2da0135edc6eaeee2392674bc3c498271c534b4b7aac629c478901a5f.exe"
    1⤵
      PID:1468

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1468-54-0x0000000075371000-0x0000000075373000-memory.dmp

      Filesize

      8KB