Overview

overview

10

Static

static

eb5bc7ef79...a1.exe

windows7-x64

10

eb5bc7ef79...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb5bc7ef7933010759f6d6651c8f7bf3e9afdffe926d77fc96990f9445f6baa1

  • Size

    326KB

  • Sample

    220724-shbgesgcd7

  • MD5

    95366442e1f66757391aec72885cc434

  • SHA1

    9eab6b911f788715fd148bcebae7805d6f2dc819

  • SHA256

    eb5bc7ef7933010759f6d6651c8f7bf3e9afdffe926d77fc96990f9445f6baa1

  • SHA512

    81bcde0e6455d6870969e51051317f5e8aefc8a41ee3f91263e56abbf1345f2369414f1fb45c96a0ce79ba5502674254b5031a55ca1d6db0114f807ff56928b7

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      eb5bc7ef7933010759f6d6651c8f7bf3e9afdffe926d77fc96990f9445f6baa1

    • Size

      326KB

    • MD5

      95366442e1f66757391aec72885cc434

    • SHA1

      9eab6b911f788715fd148bcebae7805d6f2dc819

    • SHA256

      eb5bc7ef7933010759f6d6651c8f7bf3e9afdffe926d77fc96990f9445f6baa1

    • SHA512

      81bcde0e6455d6870969e51051317f5e8aefc8a41ee3f91263e56abbf1345f2369414f1fb45c96a0ce79ba5502674254b5031a55ca1d6db0114f807ff56928b7

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks