Extracted

• • Target

    cfae0ebf4895d8f2d6af998603595dd522b922d6dc563184fd79c623ec721d51

  • Size

    1.2MB

  • MD5

    e87446d66075a90aa1b5f5b22aab3fef

  • SHA1

    3424ac9b9426faabd3fe1c5ceb0842ea324ba30d

  • SHA256

    cfae0ebf4895d8f2d6af998603595dd522b922d6dc563184fd79c623ec721d51

  • SHA512

    5acc508a84580bb21087f3273e9a760e23e7d430e5db6bc6863631a9b0b41517a40db187d1a1bf80a2196cf501539527fa29d4341a475b6b43d98a7b3990112b

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2