Overview

overview

10

Static

static

10b80ff723...39.exe

windows7-x64

10

10b80ff723...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10b80ff72381df336d3933cd4506c4d83cce6dc191474aa5a3daf858edc06239

  • Size

    132KB

  • Sample

    221126-h6v6mabf75

  • MD5

    866cc1dddb4bedb96cf7c36634e7aab6

  • SHA1

    ad5af987f08a013c47735ba5ed384ab8d346e5e4

  • SHA256

    10b80ff72381df336d3933cd4506c4d83cce6dc191474aa5a3daf858edc06239

  • SHA512

    b9b1da4e21d3676d1c4c0785bff7d907997b80445c6a13c1520ba4f0faedcd0468b09128119ccfa577193d7083bd446fb9afa4e7e225efbfec013fdbf394d32d

  • SSDEEP

    3072:BT66HrEhPiRKlU+I/QU5lBiX58nHue9dh6mdao2y:M+Eh60lvQhoErdcmdt2

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      10b80ff72381df336d3933cd4506c4d83cce6dc191474aa5a3daf858edc06239

    • Size

      132KB

    • MD5

      866cc1dddb4bedb96cf7c36634e7aab6

    • SHA1

      ad5af987f08a013c47735ba5ed384ab8d346e5e4

    • SHA256

      10b80ff72381df336d3933cd4506c4d83cce6dc191474aa5a3daf858edc06239

    • SHA512

      b9b1da4e21d3676d1c4c0785bff7d907997b80445c6a13c1520ba4f0faedcd0468b09128119ccfa577193d7083bd446fb9afa4e7e225efbfec013fdbf394d32d

    • SSDEEP

      3072:BT66HrEhPiRKlU+I/QU5lBiX58nHue9dh6mdao2y:M+Eh60lvQhoErdcmdt2

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks