General

  • Target

    4444-355-0x0000000010550000-0x0000000010585000-memory.dmp

  • Size

    212KB

  • Sample

    220929-dkjhgsafgr

  • MD5

    37c70bf71f672f64d062691d686cbf76

  • SHA1

    e33b498908c22679ae22917ff2164b2446545846

  • SHA256

    e0d701886120107673f19e658cc2985b60110521fd5d6a9955b2f61eee97dc9c

  • SHA512

    80e2922ef48c2e6cb756b2894e855c28692d985ae662538d42a9b7f657362dcfb383735138aa823c0ee4d68a634432d7021849a00c7de0dc154e39a84f2f5107

Malware Config

Targets

    • Target

      4444-355-0x0000000010550000-0x0000000010585000-memory.dmp

    • Size

      212KB

    • MD5

      37c70bf71f672f64d062691d686cbf76

    • SHA1

      e33b498908c22679ae22917ff2164b2446545846

    • SHA256

      e0d701886120107673f19e658cc2985b60110521fd5d6a9955b2f61eee97dc9c

    • SHA512

      80e2922ef48c2e6cb756b2894e855c28692d985ae662538d42a9b7f657362dcfb383735138aa823c0ee4d68a634432d7021849a00c7de0dc154e39a84f2f5107

    • NetWire RAT payload

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation