General

  • Target

    5114f1b209256030f23a3e00371f8ef7cf1fd984951d593024b5acf97bce6636

  • Size

    1.3MB

  • MD5

    2cfc27abd30a83614a30a177e0ac24ee

  • SHA1

    e022f387c073863c5f34e2906e7ae8289653a5c6

  • SHA256

    5114f1b209256030f23a3e00371f8ef7cf1fd984951d593024b5acf97bce6636

  • SHA512

    ce5174b0eecb788a893772d30be9e0b811c7de3c0ea66f06c7f2eed4ff6fe8158762a4013dced3dd4b69fbec7faefad0c27f9f93e80343024d9eed0bec760228

  • SSDEEP

    24576:Ku6J33O0c+JY5UZ+XC0kGso6Fa720W4njUprvVcC1f2o5RRfgUWYK:8u0c++OCvkGs9Fa+rd1f26RaYK

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5114f1b209256030f23a3e00371f8ef7cf1fd984951d593024b5acf97bce6636
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections