General
-
Target
520-69-0x0000000000400000-0x0000000000433000-memory.dmp
-
Size
204KB
-
Sample
220722-wb2ltaggf8
-
MD5
e15b93cc8eaaa13412cdc89bed001f3e
-
SHA1
d55756ada72bcdfc005bca383efaf7a9976a5085
-
SHA256
df7ee9579e9bad437d2adff881931b50e145ad10ea30a800e7e05d07f062f779
-
SHA512
667dad5f1b2c3b7d329438737e8d3227be17cc1c661ba7c54c469f2b7149bd4e154d58c19444e0f9e855481fdddc35e9e82806151e1d1db839f2ceca015503b1
Behavioral task
behavioral1
Sample
520-69-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
520-69-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win10v2004-20220721-en
Malware Config
Extracted
netwire
185.140.53.154:3343
185.140.53.154:3345
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-%Rand%
-
keylogger_dir
%AppData%\Logs\
-
lock_executable
false
-
offline_keylogger
true
-
password
Pass@2022
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
520-69-0x0000000000400000-0x0000000000433000-memory.dmp
-
Size
204KB
-
MD5
e15b93cc8eaaa13412cdc89bed001f3e
-
SHA1
d55756ada72bcdfc005bca383efaf7a9976a5085
-
SHA256
df7ee9579e9bad437d2adff881931b50e145ad10ea30a800e7e05d07f062f779
-
SHA512
667dad5f1b2c3b7d329438737e8d3227be17cc1c661ba7c54c469f2b7149bd4e154d58c19444e0f9e855481fdddc35e9e82806151e1d1db839f2ceca015503b1
Score3/10 -