General
-
Target
1968f9eec5d49a56b438eeaff7c71b22a5600028b6c6571e1add170d6c0192f8
-
Size
4.9MB
-
Sample
230129-1tnvwsfg7w
-
MD5
a45152d1b89cf26aa94104c1154c87ac
-
SHA1
9b6101cc5bf1b328bac9de91c0102caf7ec4fc14
-
SHA256
1968f9eec5d49a56b438eeaff7c71b22a5600028b6c6571e1add170d6c0192f8
-
SHA512
cba252e612dd7b9cda716abc44999fea113347b6821f616933aaeed8789beab133bb0469e1194d0893352bb066424875a05ab0b1d8cc2c261518657551f01b51
-
SSDEEP
98304:10fY0CspGCvRZFUhsGZtWttFsJObcFksHPlJF3t2GSqZQl2+:VTCZPkhxka5t2Fzg+
Static task
static1
Behavioral task
behavioral1
Sample
1968f9eec5d49a56b438eeaff7c71b22a5600028b6c6571e1add170d6c0192f8.dll
Resource
win7-20220812-en
Malware Config
Extracted
netwire
mikemikemic.com:9336
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-mIgseg
-
lock_executable
false
-
offline_keylogger
false
-
password
Password123
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
1968f9eec5d49a56b438eeaff7c71b22a5600028b6c6571e1add170d6c0192f8
-
Size
4.9MB
-
MD5
a45152d1b89cf26aa94104c1154c87ac
-
SHA1
9b6101cc5bf1b328bac9de91c0102caf7ec4fc14
-
SHA256
1968f9eec5d49a56b438eeaff7c71b22a5600028b6c6571e1add170d6c0192f8
-
SHA512
cba252e612dd7b9cda716abc44999fea113347b6821f616933aaeed8789beab133bb0469e1194d0893352bb066424875a05ab0b1d8cc2c261518657551f01b51
-
SSDEEP
98304:10fY0CspGCvRZFUhsGZtWttFsJObcFksHPlJF3t2GSqZQl2+:VTCZPkhxka5t2Fzg+
-
NetWire RAT payload
-
Blocklisted process makes network request
-