Overview

overview

10

Static

static

f3f0ab1916...a1.exe

windows7-x64

10

f3f0ab1916...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3f0ab1916d19a43b2e65d852ccfd03947d05c13be518429cb2e85bed066bfa1

  • Size

    152KB

  • Sample

    221127-aeqg3aeg29

  • MD5

    10872e9bc54fd33bb2352cf8c4e690af

  • SHA1

    1ab146b876c38c5066d8d1b407f6d4eb21dae9cf

  • SHA256

    f3f0ab1916d19a43b2e65d852ccfd03947d05c13be518429cb2e85bed066bfa1

  • SHA512

    7f8daab98e5b05d1cfd68bd6a066b3e484a33d021b9315b7a5d0bfce63714ce44efec15be653743d7bc9b102aa9b0daf9a5e5dbb17f6db5e5648fe9387c7fb7a

  • SSDEEP

    3072:8y0mw32Nps1LqcGht0PeQkApfHoBZTjbX6rxcMKhya7a3KFM24bCJyAbm5:8Fmc2jOQ0PeQNhyVjY4ya7a3sM9YyAbm

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      f3f0ab1916d19a43b2e65d852ccfd03947d05c13be518429cb2e85bed066bfa1

    • Size

      152KB

    • MD5

      10872e9bc54fd33bb2352cf8c4e690af

    • SHA1

      1ab146b876c38c5066d8d1b407f6d4eb21dae9cf

    • SHA256

      f3f0ab1916d19a43b2e65d852ccfd03947d05c13be518429cb2e85bed066bfa1

    • SHA512

      7f8daab98e5b05d1cfd68bd6a066b3e484a33d021b9315b7a5d0bfce63714ce44efec15be653743d7bc9b102aa9b0daf9a5e5dbb17f6db5e5648fe9387c7fb7a

    • SSDEEP

      3072:8y0mw32Nps1LqcGht0PeQkApfHoBZTjbX6rxcMKhya7a3KFM24bCJyAbm5:8Fmc2jOQ0PeQNhyVjY4ya7a3sM9YyAbm

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks