Overview

overview

10

Static

static

10

ab8a97d1bb...6b.exe

windows7-x64

10

ab8a97d1bb...6b.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    142s
  • max time network
    183s
  • platform
    windows7_x64
  • resource
    win7-20220718-en
  • resource tags

    arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
  • submitted
    31-07-2022 07:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ab8a97d1bb25b4459872b5eda90514e26d62cbba0699dcebd0ccfe43e753016b.exe

  • Size

    127KB

  • MD5

    d6c714f9d22fbb1ba9072268ee76af4c

  • SHA1

    40e0363da51f7631b94350ad14d0001c290b21dd

  • SHA256

    ab8a97d1bb25b4459872b5eda90514e26d62cbba0699dcebd0ccfe43e753016b

  • SHA512

    45b3f060c150f6507d6644230080f06c57810ff7a1a1c3ba13e204b29569adbf916b4a483b3917009ddad58d46f3a11bcfdce22fbff4670feb69756fc877a4a0

Score
10/10
netwirebotnetstealer

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab8a97d1bb25b4459872b5eda90514e26d62cbba0699dcebd0ccfe43e753016b.exe
    "C:\Users\Admin\AppData\Local\Temp\ab8a97d1bb25b4459872b5eda90514e26d62cbba0699dcebd0ccfe43e753016b.exe"
    1⤵
      PID:948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/948-54-0x0000000075A61000-0x0000000075A63000-memory.dmp

      Filesize

      8KB

      Download