Overview

overview

10

Static

static

10

404b978efe...59.exe

windows7-x64

1

404b978efe...59.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    404b978efeef82c4be12d90875ddd059.exe

  • Size

    132KB

  • MD5

    404b978efeef82c4be12d90875ddd059

  • SHA1

    c944b6066d7f89da8095f5fa1cd1d8f2eba44c04

  • SHA256

    459a609ffde4325a1e55f7b9a788ab5cf978d3e07c54349b9f9e50f1e6875c89

  • SHA512

    f32b36eed4827681c5130911577bf99c04d17a3573804a0163c5357c3878d0b5f887922b6a82f3bea0c3d78bc6606aab1deaca4e4677ec29b38a057dc74f5602

  • SSDEEP

    1536:2tTSUSKzF0Lh9a7WraTWFbmDHVXWRVAzZ8vfUSl7Q3rwDkV15gjsG:2t5SKzF0Lh9a7IGW9GHeOFavc3rz6sG

Score
10/10
ratnetwire

Malware Config

Extracted

Family

netwire

C2

mx.jdk-ca.com:8443

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    HostId-%Rand%

  • lock_executable

    false

  • offline_keylogger

    false

  • password

    Password!@#$%^

  • registry_autorun

    false

  • use_mutex

    false

Signatures

  • NetWire RAT payload 1 IoCs
    rat
  • Netwire family
    netwire

Files

  • 404b978efeef82c4be12d90875ddd059.exe
    .exe windows x86

    4e6ba17721530f6e9a509b1380c99995


    Headers

    Imports

    Sections