Overview

overview

10

Static

static

10

0x000c0000...55.exe

windows7-x64

10

0x000c0000...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000c0000000054a8-55.dat

  • Size

    273KB

  • Sample

    230105-yq3tjada86

  • MD5

    8d832a17a7134571f228bc0da586a541

  • SHA1

    274f83a8874d16ff937d3e8c231bcf4916d18fe8

  • SHA256

    36b9e2e48e5f7ab4543df7f80d299bb72e65c5f343d8bb1d8bff39764a829c8f

  • SHA512

    0b5e00c88a35eb72b0f06d82fe3cd5a84c0520480f3d631ca42c7d3bc04bf33001f84943c6d4e9c8e1abb00414669a978de45b72b6bb8a002cc5c53d86d88bcb

  • SSDEEP

    6144:ebhnot4+sbOAtbkfHLDiT6OzR8Q0l+/NyqRKbhoXqqD8XAm8B:elnot4+UwLDiT6OzR8llAgqtB

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      0x000c0000000054a8-55.dat

    • Size

      273KB

    • MD5

      8d832a17a7134571f228bc0da586a541

    • SHA1

      274f83a8874d16ff937d3e8c231bcf4916d18fe8

    • SHA256

      36b9e2e48e5f7ab4543df7f80d299bb72e65c5f343d8bb1d8bff39764a829c8f

    • SHA512

      0b5e00c88a35eb72b0f06d82fe3cd5a84c0520480f3d631ca42c7d3bc04bf33001f84943c6d4e9c8e1abb00414669a978de45b72b6bb8a002cc5c53d86d88bcb

    • SSDEEP

      6144:ebhnot4+sbOAtbkfHLDiT6OzR8Q0l+/NyqRKbhoXqqD8XAm8B:elnot4+UwLDiT6OzR8llAgqtB

    Score
    10/10
    netwirebotnetstealer

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks