Analysis

  • max time kernel
    84s
  • max time network
    89s
  • platform
    windows7_x64
  • resource
    win7-20220715-en
  • resource tags

    arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
  • submitted
    31-07-2022 07:11

General

  • Target

    90a80ce3af5ec668660b8e993a4296b320422d40f8389d7e79f0482187ab36b5.exe

  • Size

    106KB

  • MD5

    8d5f3b2715314aa08440ce9cba0910e1

  • SHA1

    80a492086839c1937cf8786ea11a0654b1bc8640

  • SHA256

    90a80ce3af5ec668660b8e993a4296b320422d40f8389d7e79f0482187ab36b5

  • SHA512

    49b384cc495175d7fea6b33ea342c5165667eaca954ffed83a10660f97e073bb39742375181aeda52f3f7ad04b7a54f9c5dfecf2f5ec2e75fa321b35ab2312d1

Score
10/10

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Processes

  • C:\Users\Admin\AppData\Local\Temp\90a80ce3af5ec668660b8e993a4296b320422d40f8389d7e79f0482187ab36b5.exe
    "C:\Users\Admin\AppData\Local\Temp\90a80ce3af5ec668660b8e993a4296b320422d40f8389d7e79f0482187ab36b5.exe"
    1⤵
      PID:1812

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1812-54-0x0000000076191000-0x0000000076193000-memory.dmp

      Filesize

      8KB