Extracted

• • Target

    3d1fedae3b958d20bbfaeb8fd3aa15d9_JaffaCakes118

  • Size

    297KB

  • MD5

    3d1fedae3b958d20bbfaeb8fd3aa15d9

  • SHA1

    a647f029b6e3035a5a0184b9731627e83b758b65

  • SHA256

    4dcf1134a50b6c5ffd72fed501638c2e6d1c820c5f949190182c9a6b6841b437

  • SHA512

    9540583d07d944aae7993c3108696977c3c8e51421a49c33276ccb8e3de543d1b8ac10ade84544a1e81cf114257ef005012b55f540ea2f58dfe5871bf9a9e1f6

  • SSDEEP

    6144:seVz5osDIuxtSCWZUxrbAiqxHuKruz5wxEZ0q/zaW6iB:s85bEugislfruz5k00iB

  Score

  10^/10

  netwirebotnetratrezer0stealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • ReZer0 packer

    Detects ReZer0, a packer with multiple versions used in various campaigns.

    rezer0

  • Suspicious use of SetThreadContext

  behavioral1behavioral2