Extracted

• • Target

    b722857a2e6973e5a0b7a4a156a5c124

  • Size

    2.9MB

  • MD5

    b722857a2e6973e5a0b7a4a156a5c124

  • SHA1

    fe29fbb1cc39f88bc6e79ae590ab484e77d939f7

  • SHA256

    50c20a61869603cadc7b1d2a4c7a97f870a1a3ca760138a67ee58f445926fe24

  • SHA512

    ee5add3504db24555af10e02eed92491a058a924be48cced9aada05cd3ae284a14041fc3c33dc7cb83efd7725232e63c5819393eb1ac9878cccfcab12eb74126

  • SSDEEP

    24576:MB/8Nnxg99IlM4dtxAuWRLRFRYPqSnOzAIPNo6H9lgLxd4Bn1sw4jKn3Zgf2YSNk:M4ni9p36O8JoXhojUpO2YS4/XVwR+

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2