Extracted

• • Target

    0dc24cc234e7b9256b58ad51ba14b93a62510bf758dd51f4bd998407c3d16a10

  • Size

    963KB

  • MD5

    ca67d8d25dee9e618c4c6ad2d04745df

  • SHA1

    a8abda0552a7a6540ca6e7261468d66633c72003

  • SHA256

    0dc24cc234e7b9256b58ad51ba14b93a62510bf758dd51f4bd998407c3d16a10

  • SHA512

    bc4cd0612682375f58136f5aee3a2fff3d7a8d399b00c82060bff19138c026aad4cc826bb1257f2b1b8e8e571aa97195728d79cbb58ec4277cab1c5e0de70a76

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2