Analysis
-
max time kernel
168s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
-
submitted
02-08-2022 02:15
General
-
Target
5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb.exe
-
Size
292KB
-
MD5
32a4863df763521bbda8194091ac6b55
-
SHA1
839b12c0b149545b43cf3aab0d1750e2d6e0a663
-
SHA256
5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb
-
SHA512
647c294500a88e2ede78a66f9425ac4371726c254feb36222d27e4e8a953802595204741d0933c80d63f585d12af5685647ea809256f0209485ace0b86451d25
Malware Config
Signatures
-
NetWire RAT payload 3 IoCs
-
Netwire
Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb.exe"C:\Users\Admin\AppData\Local\Temp\5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb.exe"1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb.exe"C:\Users\Admin\AppData\Local\Temp\5acb47dac6f58284520fd5f815649102fd35f832aa32e56c7fe85b7e89c5a3eb.exe"2⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
123B
MD56bf517432f65eb7f0d18d574bf14124c
SHA15b9f37c1dd1318ebbec3bd2f07c109eb9d22c727
SHA2566e2b70dfccabf3cc651545676a3a566c9cfae03f15f772886646abce1da35b46
SHA5127b0cb8c20034585ec8bf4b45eda5eda5993a56e24931a7426dc5a9f081ec1f82545f3e26a48a4df885c8691fc6e8026d0808aebe3cc3358ba85ddca08ac4cb06
-
-
Filesize
316KB
-
Filesize
148KB
-
Filesize
316KB
-
Filesize
12KB
-
Filesize
2.0MB
-
Filesize
1.6MB
-
Filesize
12KB
-
Filesize
2.0MB
-
Filesize
1.6MB
-
Filesize
12KB