General

  • Target

    cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb.zip

  • Size

    41KB

  • Sample

    240707-n27azs1fkj

  • MD5

    34afe8b10bf209473c1313939df43c35

  • SHA1

    027600481200c9d74417786b450be471d9de7e02

  • SHA256

    80dd215aabe5b7e902f2cb64cd77049011637ec3f65dc00782dab64a1c57c536

  • SHA512

    0de987421357527325df017babb771f7364309c3814ed06757345939601cc5d3c4c312dd4dde796b56f7766615ef436742daed4336f33cc5f1b11011df1f0a6c

  • SSDEEP

    768:4fbfyk6Yo2cOchNMhGnhtzDUkadBNbxDOKFJG1/SW5ziU3utXr/tmFJmJlCWoN6S:g9oGoWhGHzDNGZxDOKFJJWAU3utJmFJz

Malware Config

Extracted

Family

netwire

C2

abi.asu.su:2525

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    abi

  • lock_executable

    false

  • offline_keylogger

    false

  • password

    Somma2009

  • registry_autorun

    false

  • use_mutex

    false

Targets

    • Target

      cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb

    • Size

      84KB

    • MD5

      64c2af0bd91c8ac12cec3a3978cf191f

    • SHA1

      6b988fd4f98e67e8be9359b5f3c9ea33fb470173

    • SHA256

      cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb

    • SHA512

      4725787862d05c0e9632caf7c8c6e6dfdfd75e8e2a11f5a7c9724ccfbe47689674a5e92e31e29f6f864a1d03f7fbe0dd2ac0a91183ba3866b0c6097510ecf220

    • SSDEEP

      1536:Jr/zIEc9uQ1q1vD9qrPP+r4MrdN/F+Xs6ibNqiRGWkxuAdDWTF:Jr/zIEyQIrPP+r4MrdN/086ibgqGWk0x

    • NetWire RAT payload

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

MITRE ATT&CK Matrix

Tasks