Extracted

• • Target

    5d3cd35b14139a2a6e67171db87a035c3da9aba952969197e41fa78abdf7ff4e.exe

  • Size

    780KB

  • MD5

    f4e294e4ff1d37874053074e502349ec

  • SHA1

    ada0f22588448ffc218556ce12b045316d1ee418

  • SHA256

    5d3cd35b14139a2a6e67171db87a035c3da9aba952969197e41fa78abdf7ff4e

  • SHA512

    c81582ce3119cc670f6092c82a525dc0fb9a4b68427646a7bc04fe0e0814845a82782c4284c5576453bc944f660778dc836d784d7f5fd780c56a101574cb0328

  • SSDEEP

    3072:lD7fFC3Xi1NCvsHrryNyXtYUKucJcmGUcBCEHl5HHghiUjIyDvUmTncs4U+21s8D:lv06NIIKOm+YSHllAhxc2smYsvds8WC

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2