Overview

overview

10

Static

static

10

1864-84-0x...ry.exe

windows7-x64

1

1864-84-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1864-84-0x0000000000400000-0x0000000000433000-memory.dmp

  • Size

    204KB

  • Sample

    220802-wgrzkaaggn

  • MD5

    5f65a902be0e2e4402e5958b93014d57

  • SHA1

    1206727846eff014dede104c9a52b189209422c5

  • SHA256

    af0238b491487d7005064dad92f3e04e4ea99911de8fdddf181a9e48439c7f45

  • SHA512

    b6f15b9eee59e1c4f058e781e9077eb96ce1887844d1cc2b6d6241fb1902a8959b79598a696c27c2f02abc23dfbb3502e3355fd8c4581c3dbb5ea31b58bd03aa

Score
10/10
netwirerat

Malware Config

Extracted

Family

netwire

C2

37.0.14.206:3384

Attributes
  • activex_autorun

    false

  • copy_executable

    true

  • delete_original

    false

  • host_id

    HostId-%Rand%

  • install_path

    %AppData%\Install\Host.exe

  • keylogger_dir

    %AppData%\Logs\

  • lock_executable

    true

  • offline_keylogger

    true

  • password

    Password234

  • registry_autorun

    false

  • use_mutex

    false

Targets

    • Target

      1864-84-0x0000000000400000-0x0000000000433000-memory.dmp

    • Size

      204KB

    • MD5

      5f65a902be0e2e4402e5958b93014d57

    • SHA1

      1206727846eff014dede104c9a52b189209422c5

    • SHA256

      af0238b491487d7005064dad92f3e04e4ea99911de8fdddf181a9e48439c7f45

    • SHA512

      b6f15b9eee59e1c4f058e781e9077eb96ce1887844d1cc2b6d6241fb1902a8959b79598a696c27c2f02abc23dfbb3502e3355fd8c4581c3dbb5ea31b58bd03aa

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks