Analysis
-
max time kernel
150s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
30-08-2022 00:14
General
-
Target
015f676fe99b8a42a30cf0342fe56681.exe
-
Size
273KB
-
MD5
015f676fe99b8a42a30cf0342fe56681
-
SHA1
1d3f4d3dc89db9d0a3ef76eab3d0be7fdb88a153
-
SHA256
3c02f2f6edc7650ab3f81f75029de05df7e421516e3aaf32edbf97105595eee1
-
SHA512
b0239345a95a411d44d0b947bb25fecf4858a68584fc392df6330ca37b24cb9425436ffe101a1ba373bcff9f8af1a7e52069f1a1f608da0daca9a3442a756f1c
-
SSDEEP
6144:ebhnot4+sbOAtbkfHLDiT6OzR8Q0l+/NyqRKbhoXqqD8XF8B:elnot4+UwLDiT6OzR8llAgq3B
Score
10/10
Malware Config
Signatures
-
Netwire
Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
Processes
-
C:\Users\Admin\AppData\Local\Temp\015f676fe99b8a42a30cf0342fe56681.exe"C:\Users\Admin\AppData\Local\Temp\015f676fe99b8a42a30cf0342fe56681.exe"1⤵