Overview

overview

10

Static

static

10

3168-370-0...ry.exe

windows7-x64

10

3168-370-0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    26s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    30-10-2022 03:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3168-370-0x0000000010560000-0x00000000105B2000-memory.exe

  • Size

    328KB

  • MD5

    82b6c935946049119286ed8516f04924

  • SHA1

    fa8db16d6a13dc907f4c4fda55d03f8887dc1286

  • SHA256

    c1e062e933fc6527e29e761d59e2d7d9c3847e78202450d76028aaa2c8d82f6b

  • SHA512

    b96fbac28686e3747fe12279fe802eb604b2c3d054e0f4fad73e2c5a3ff06e9ae14bf8d8031f3d045dbf1d252aa360da696488dd5b6536ac187128a0475ccabc

  • SSDEEP

    6144:Nbhnot4+sbOAtbkfHLDiT6OzR8Q0l+/NyqRKbhoXqqD8Xi8B:Nlnot4+UwLDiT6OzR8llAgqQB

Score
10/10
netwirebotnetratstealer

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
    rat
  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

Processes

  • C:\Users\Admin\AppData\Local\Temp\3168-370-0x0000000010560000-0x00000000105B2000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3168-370-0x0000000010560000-0x00000000105B2000-memory.exe"
    1⤵
      PID:964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/964-54-0x0000000000550000-0x00000000005A2000-memory.dmp
      Filesize

      328KB

      Download