Analysis

  • max time kernel
    50s
  • max time network
    139s
  • platform
    windows10-1703_x64
  • resource
    win10-20220722-en
  • resource tags

    arch:x64arch:x86image:win10-20220722-enlocale:en-usos:windows10-1703-x64system
  • submitted
    02-08-2022 17:32

General

  • Target

    3adeefdaffda88ac8183d5c4164c9ad10b63c039c72fac187a596f4fcf906c00.exe

  • Size

    273KB

  • MD5

    8f98297f190db64c6c1bb9b85b78eca5

  • SHA1

    1bef5e61a3c11a8651870f3ad386f0a09f94de52

  • SHA256

    3adeefdaffda88ac8183d5c4164c9ad10b63c039c72fac187a596f4fcf906c00

  • SHA512

    193054828f611dc98410472d519618de039cdf33fd9611d7214d695f8328c718a7b444412e8de74ad7ab14ed922f52354dd73b3069acddea1942469062f6721b

Score
10/10

Malware Config

Signatures

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3adeefdaffda88ac8183d5c4164c9ad10b63c039c72fac187a596f4fcf906c00.exe
    "C:\Users\Admin\AppData\Local\Temp\3adeefdaffda88ac8183d5c4164c9ad10b63c039c72fac187a596f4fcf906c00.exe"
    1⤵
      PID:5072

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5072-127-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-128-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-129-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-130-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-131-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-132-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-133-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-134-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-135-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-136-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-137-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-138-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-139-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-140-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-141-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-142-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-143-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-144-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-145-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-146-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-147-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-148-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-149-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-150-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-151-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-152-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-153-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-154-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-155-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-156-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-157-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-158-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-159-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-160-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-161-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-162-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-163-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-164-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-165-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-166-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-167-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-168-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-169-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-170-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-171-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-172-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-173-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-174-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB

    • memory/5072-175-0x0000000076F10000-0x000000007709E000-memory.dmp

      Filesize

      1.6MB