General
-
Target
7c655182a7cef25f6a1c56e50236d38b.exe
-
Size
46KB
-
Sample
221110-jw468ahhdn
-
MD5
7c655182a7cef25f6a1c56e50236d38b
-
SHA1
c45644a60b3f62a84621425d6275725243469b77
-
SHA256
3b825210b99a016893d31e4590d385c83c9eb7c9152657d5c0997eb08d741800
-
SHA512
dd8a1bac7ec350fa2e6b22bfd140584f3d44c45a67d4aebf881cd29f389653694c9ca2592a41386a2545f82b6d1f4d3df90e1322d67f9a8a99d2b0032d30ebf6
-
SSDEEP
768:TbkHaGfhuSDS5PmxxxxxixX0ylUpK9jg+HLr6GbOsKpeQi9c/KYP3hrvGoTr:nGaGpuSDu306Uk9jg+rr6GbOsKpeQiQn
Static task
static1
Behavioral task
behavioral1
Sample
7c655182a7cef25f6a1c56e50236d38b.exe
Resource
win7-20220901-en
Malware Config
Extracted
netwire
212.193.30.230:3363
212.193.30.230:3362
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-%Rand%
-
keylogger_dir
%AppData%\Logs\
-
lock_executable
false
-
offline_keylogger
true
-
password
Cantbeme@1
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
7c655182a7cef25f6a1c56e50236d38b.exe
-
Size
46KB
-
MD5
7c655182a7cef25f6a1c56e50236d38b
-
SHA1
c45644a60b3f62a84621425d6275725243469b77
-
SHA256
3b825210b99a016893d31e4590d385c83c9eb7c9152657d5c0997eb08d741800
-
SHA512
dd8a1bac7ec350fa2e6b22bfd140584f3d44c45a67d4aebf881cd29f389653694c9ca2592a41386a2545f82b6d1f4d3df90e1322d67f9a8a99d2b0032d30ebf6
-
SSDEEP
768:TbkHaGfhuSDS5PmxxxxxixX0ylUpK9jg+HLr6GbOsKpeQi9c/KYP3hrvGoTr:nGaGpuSDu306Uk9jg+rr6GbOsKpeQiQn
-
NetWire RAT payload
-
Suspicious use of SetThreadContext
-