netwire | 502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e | Triage

Submit
Reports

Overview

overview

Static

static

502982f058...2e.exe

windows7-x64

502982f058...2e.exe

windows10-2004-x64

Sharing

General

Target

502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e
Size

84KB
Sample

220719-lerwnsahg5
MD5

64a019eac9e7e30715484e6ac037472c
SHA1

148cad04639cafef0b16d6012e12e4c3b93ff66a
SHA256

502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e
SHA512

2b5d6ce386fccaa36efcee3471c630ef013b05d33d4d64b4de160e628ea62734e32748699ddd5c25a1b02e6550f84585f216adebd54248062eea1dae458936ab

Score

10^/10

netwire botnet rat stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e.exe

Resource

win7-20220718-en

netwire botnet rat stealer

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e.exe

Resource

win10v2004-20220718-en

netwire botnet rat stealer

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e
- Size
  
  84KB
- MD5
  
  64a019eac9e7e30715484e6ac037472c
- SHA1
  
  148cad04639cafef0b16d6012e12e4c3b93ff66a
- SHA256
  
  502982f058ad68a55b9c4a4516bb98eef4bb9408c4b4e84789f59626293e9b2e
- SHA512
  
  2b5d6ce386fccaa36efcee3471c630ef013b05d33d4d64b4de160e628ea62734e32748699ddd5c25a1b02e6550f84585f216adebd54248062eea1dae458936ab
Score

10^/10

netwire botnet rat stealer
- NetWire RAT payload
  rat
- Netwire
  Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
  botnet stealer netwire
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

netwirebotnetratstealer

behavioral2

netwirebotnetratstealer

© 2018-2024

Terms | Privacy