General
-
Target
57f791031e769640610b6b27b48c78b4958ba4874c9ec2afe7cafcd3bc3ceace
-
Size
720KB
-
Sample
221128-n5cksafh9v
-
MD5
92e83e03b9e27a7078a44b52691c2c7a
-
SHA1
a5511fde0a32228a4bd916ccb43339ec612dcc7c
-
SHA256
57f791031e769640610b6b27b48c78b4958ba4874c9ec2afe7cafcd3bc3ceace
-
SHA512
8533a0d95267c3ce622f8a2daae3da246f810970b07c34ed2c2ea74335a826fbae05293a38bff2663e05ca53e08a7f176bc275ddf6d4b762f45b9da6b8972e18
-
SSDEEP
12288:M1dlZo5yqRUi8jAvjTWbu8DskTWEtVuNnjtP9P2JYTUDPZA:M1dlZo5zRUi8cHWAjEtcNj19Pm8U7W
Static task
static1
Behavioral task
behavioral1
Sample
57f791031e769640610b6b27b48c78b4958ba4874c9ec2afe7cafcd3bc3ceace.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
57f791031e769640610b6b27b48c78b4958ba4874c9ec2afe7cafcd3bc3ceace
-
Size
720KB
-
MD5
92e83e03b9e27a7078a44b52691c2c7a
-
SHA1
a5511fde0a32228a4bd916ccb43339ec612dcc7c
-
SHA256
57f791031e769640610b6b27b48c78b4958ba4874c9ec2afe7cafcd3bc3ceace
-
SHA512
8533a0d95267c3ce622f8a2daae3da246f810970b07c34ed2c2ea74335a826fbae05293a38bff2663e05ca53e08a7f176bc275ddf6d4b762f45b9da6b8972e18
-
SSDEEP
12288:M1dlZo5yqRUi8jAvjTWbu8DskTWEtVuNnjtP9P2JYTUDPZA:M1dlZo5zRUi8cHWAjEtcNj19Pm8U7W
-
NetWire RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-