Overview

overview

10

Static

static

7544ba4fd0...54.exe

windows7-x64

10

7544ba4fd0...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7544ba4fd00badd2522fbf68e6851d5beb78a25a3c9000cfcac80e0881a9d154

  • Size

    152KB

  • Sample

    221128-wbc88adb94

  • MD5

    c756930ccb2742e33e0f8deab700fcf5

  • SHA1

    73509d236ae74b2cceee05b32add279c8453c68a

  • SHA256

    7544ba4fd00badd2522fbf68e6851d5beb78a25a3c9000cfcac80e0881a9d154

  • SHA512

    be0932f55686986810fd614c7d33d81aab8f388e25869f8bd5940834b69574ba258f41d2320d312da0cc0a3bc5f9860460d4afb3abb57ae21d3a6761fd3fe6f2

  • SSDEEP

    3072:fJCpAhQZhyW+bp+pkYZbC01dUg/wq2ILYgzjBP6SKAwgbxhiB2rUGT/pA:RCzhyWA+/o0j8IcgZijB2rUG6

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      7544ba4fd00badd2522fbf68e6851d5beb78a25a3c9000cfcac80e0881a9d154

    • Size

      152KB

    • MD5

      c756930ccb2742e33e0f8deab700fcf5

    • SHA1

      73509d236ae74b2cceee05b32add279c8453c68a

    • SHA256

      7544ba4fd00badd2522fbf68e6851d5beb78a25a3c9000cfcac80e0881a9d154

    • SHA512

      be0932f55686986810fd614c7d33d81aab8f388e25869f8bd5940834b69574ba258f41d2320d312da0cc0a3bc5f9860460d4afb3abb57ae21d3a6761fd3fe6f2

    • SSDEEP

      3072:fJCpAhQZhyW+bp+pkYZbC01dUg/wq2ILYgzjBP6SKAwgbxhiB2rUGT/pA:RCzhyWA+/o0j8IcgZijB2rUG6

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks