Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13/03/2024, 22:12
General
-
Target
c6fb6ea5636ac0727168a05c81c909ee.exe
-
Size
161KB
-
MD5
c6fb6ea5636ac0727168a05c81c909ee
-
SHA1
1fa529cf54ad947cc898518f554a731a24123fb6
-
SHA256
62fad464154b7411f1e5b993edafd111638f2b0770ffe1f6cfc166ae6b8404d9
-
SHA512
b190c36c940a77e200c95253c2181070340d51023cb168c467eadc3b2d6deed1cb5c4db71c04d2abf996720a13ab8120b0f5a62e73d21a837cf9a7d00afc7ca0
-
SSDEEP
3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJtYMSMqqD0Ffo:S3kUjJY/fRT+iceGUlzFruZdJtzxqqDd
Score
10/10
Malware Config
Extracted
Family
netwire
C2
194.5.97.9:3363
194.5.97.9:3365
Attributes
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-SOuyK2
-
keylogger_dir
C:\Users\Admin\AppData\Roaming\Logs\
-
lock_executable
false
-
offline_keylogger
true
-
password
August2021
-
registry_autorun
false
-
use_mutex
false
Signatures
-
NetWire RAT payload 2 IoCs
-
Netwire
Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6fb6ea5636ac0727168a05c81c909ee.exe"C:\Users\Admin\AppData\Local\Temp\c6fb6ea5636ac0727168a05c81c909ee.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
204KB