General
-
Target
8dfa86ab54225a8e1c2027172d71cebf13dfa2e622ac9cc06fe1058b6be3ff20.exe
-
Size
84KB
-
Sample
240527-bkr4hsbh37
-
MD5
02249b59bff7fa6b932d09cce70dc5b8
-
SHA1
93ef935fc9041c0f37bc2cb6d60e2591e33cc86e
-
SHA256
8dfa86ab54225a8e1c2027172d71cebf13dfa2e622ac9cc06fe1058b6be3ff20
-
SHA512
948339aafc124fdc15c152f1eccefa2ad5ebfd732b71bbb6bebd832bb61296027b494d0fddf18e5347c798e91c3fcc0ab000f54362dcc4012da777148923961b
-
SSDEEP
1536:7Lp3YvQCGQ10ismSklVI8VjCX1Isv3fA9qeRgLHsbg/+ySr1Ra:7Lp3Yvhn9VI8VjCX1I43fAwegLMbrO
Behavioral task
behavioral1
Sample
8dfa86ab54225a8e1c2027172d71cebf13dfa2e622ac9cc06fe1058b6be3ff20.exe
Resource
win7-20240508-en
Malware Config
Extracted
netwire
86t7b9br9.ddns.net:8980
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
HostId-MAm4sa
-
lock_executable
false
-
offline_keylogger
false
-
password
4678553478654HJKGHKJGHKJG4543
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
8dfa86ab54225a8e1c2027172d71cebf13dfa2e622ac9cc06fe1058b6be3ff20.exe
-
Size
84KB
-
MD5
02249b59bff7fa6b932d09cce70dc5b8
-
SHA1
93ef935fc9041c0f37bc2cb6d60e2591e33cc86e
-
SHA256
8dfa86ab54225a8e1c2027172d71cebf13dfa2e622ac9cc06fe1058b6be3ff20
-
SHA512
948339aafc124fdc15c152f1eccefa2ad5ebfd732b71bbb6bebd832bb61296027b494d0fddf18e5347c798e91c3fcc0ab000f54362dcc4012da777148923961b
-
SSDEEP
1536:7Lp3YvQCGQ10ismSklVI8VjCX1Isv3fA9qeRgLHsbg/+ySr1Ra:7Lp3Yvhn9VI8VjCX1I43fAwegLMbrO
-
NetWire RAT payload
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.
-