Overview

overview

10

Static

static

9ab706cf60...8d.exe

windows7-x64

10

9ab706cf60...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ab706cf606dd33db4de163677202492b81e9951754c5e6d75ed1f726560ac8d

  • Size

    152KB

  • Sample

    221127-bpbbkahh62

  • MD5

    df7c5a731b42cd427f138f8bfdc2fc86

  • SHA1

    c37707932a4c474d5fae8cd06ab5ded60e4a5505

  • SHA256

    9ab706cf606dd33db4de163677202492b81e9951754c5e6d75ed1f726560ac8d

  • SHA512

    2391a237fe108aebd2746f1e51967b67fa28208f4faf8c27ff65708ab84cf7b156d232883ce52ebcb5700aae9d1b3791c5d464148c0263f63677f352173459b5

  • SSDEEP

    3072:6yzSoVToBSpx6L/7FYgXIg0lkZFDiI9Z7vt4kHp8E2n2XDWBR3r/pWD:6KXoBHxYg0lkjt4Q22XDoRb/A

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      9ab706cf606dd33db4de163677202492b81e9951754c5e6d75ed1f726560ac8d

    • Size

      152KB

    • MD5

      df7c5a731b42cd427f138f8bfdc2fc86

    • SHA1

      c37707932a4c474d5fae8cd06ab5ded60e4a5505

    • SHA256

      9ab706cf606dd33db4de163677202492b81e9951754c5e6d75ed1f726560ac8d

    • SHA512

      2391a237fe108aebd2746f1e51967b67fa28208f4faf8c27ff65708ab84cf7b156d232883ce52ebcb5700aae9d1b3791c5d464148c0263f63677f352173459b5

    • SSDEEP

      3072:6yzSoVToBSpx6L/7FYgXIg0lkZFDiI9Z7vt4kHp8E2n2XDWBR3r/pWD:6KXoBHxYg0lkjt4Q22XDoRb/A

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks