Extracted

• • Target

    59d3f41859d239271e8f15cf8a26ba3e3af04bd28f94584aa74e159861cf0acb

  • Size

    488KB

  • MD5

    48fa86848e56656e699ace8b49c2841a

  • SHA1

    e9d0b4f2a588f7cec6639b54aa1468e7e9b189c6

  • SHA256

    59d3f41859d239271e8f15cf8a26ba3e3af04bd28f94584aa74e159861cf0acb

  • SHA512

    735a7e838140617035c853990275d3cf2bb2c806d089a5b2b97de9f7b002d200b1abe59895b15307c8dd24b2c3ec3b5ec429266056fd4a6e8c88770f6e771002

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2