Overview

overview

10

Static

static

2fa774cef5...25.exe

windows7-x64

10

2fa774cef5...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fa774cef59aeb96e93f4c542070bd87a5ca7204ab7887ca2144780a8bc6eb25

  • Size

    159KB

  • Sample

    221003-1y36dahdhq

  • MD5

    6a992514915a929d3dcb9762db40b8c0

  • SHA1

    49569935a98a7801e247adf0cc89378914f0f9a0

  • SHA256

    2fa774cef59aeb96e93f4c542070bd87a5ca7204ab7887ca2144780a8bc6eb25

  • SHA512

    6385bd293ca289535682e7c3747bd349a5ebf5b592807caeba030a208ce6bc89331288f4740ecd2d7baa22794685b3a621c1ea677dccd3e2593d104cb02e82f9

  • SSDEEP

    3072:HfiGnAuQhbOGu+TU7b8iNlrk797iKWylDGt2lcuu6:/2bDi7lL09RW/I

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      2fa774cef59aeb96e93f4c542070bd87a5ca7204ab7887ca2144780a8bc6eb25

    • Size

      159KB

    • MD5

      6a992514915a929d3dcb9762db40b8c0

    • SHA1

      49569935a98a7801e247adf0cc89378914f0f9a0

    • SHA256

      2fa774cef59aeb96e93f4c542070bd87a5ca7204ab7887ca2144780a8bc6eb25

    • SHA512

      6385bd293ca289535682e7c3747bd349a5ebf5b592807caeba030a208ce6bc89331288f4740ecd2d7baa22794685b3a621c1ea677dccd3e2593d104cb02e82f9

    • SSDEEP

      3072:HfiGnAuQhbOGu+TU7b8iNlrk797iKWylDGt2lcuu6:/2bDi7lL09RW/I

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks