Overview

overview

10

Static

static

6b363b7217...89.exe

windows7-x64

10

6b363b7217...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b363b7217ce37f00e5ba7e7749acf16b30a9f84d54d72cc18361387968c5b89

  • Size

    186KB

  • Sample

    220724-2dkzqsbacp

  • MD5

    032b9573b2c4b055d535dd8c28d6bff0

  • SHA1

    fe26637ef1ab5afbcaadbf8d749bbeb6be31b58f

  • SHA256

    6b363b7217ce37f00e5ba7e7749acf16b30a9f84d54d72cc18361387968c5b89

  • SHA512

    d1438cbad5c388daf3aca895a60449dffd626ae991be085ddd33359d3a08721d84941a188f65f026cb816cc888f42ac699ee2b463fc5fcf75b54545939a1a096

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      6b363b7217ce37f00e5ba7e7749acf16b30a9f84d54d72cc18361387968c5b89

    • Size

      186KB

    • MD5

      032b9573b2c4b055d535dd8c28d6bff0

    • SHA1

      fe26637ef1ab5afbcaadbf8d749bbeb6be31b58f

    • SHA256

      6b363b7217ce37f00e5ba7e7749acf16b30a9f84d54d72cc18361387968c5b89

    • SHA512

      d1438cbad5c388daf3aca895a60449dffd626ae991be085ddd33359d3a08721d84941a188f65f026cb816cc888f42ac699ee2b463fc5fcf75b54545939a1a096

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks