General
-
Target
3912-243-0x000000000040242D-mapping.dmp
-
Size
369KB
-
Sample
230124-kbkgrabg3t
-
MD5
c7110d0c3e3e4a8e04e9b9e188b974fd
-
SHA1
8b5d938d725971aa36beec523a49837f3cbdfc57
-
SHA256
8be782e78b15acd95d7247e9fe6054a35887da5e52d1f62ab3f33a7367bafae6
-
SHA512
378cd37390c73d70950c9d167b3caab93fe8e0cd9cfc9afe9656238eaf2e3473ff65debaaf0c134292c90c9e0559f54a1e12f6d6e8ad7a5158bebbc7a00339c5
-
SSDEEP
6144:x3kUjJY/fRT+iceGUlzFruZdJDzxqqD0Ffoz3kUjJY/fRT+iceGUlzFruZdJ7zx6:fjJYX1+5OrudJcqEgpjJYX1+5OrudJ0f
Malware Config
Extracted
Family
netwire
C2
212.193.30.230:3363
Attributes
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-%Rand%
-
keylogger_dir
%AppData%\Logs\
-
lock_executable
false
-
offline_keylogger
true
-
password
Password@2
-
registry_autorun
false
-
use_mutex
false