General
-
Target
cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb.zip
-
Size
41KB
-
Sample
240707-n27azs1fkj
-
MD5
34afe8b10bf209473c1313939df43c35
-
SHA1
027600481200c9d74417786b450be471d9de7e02
-
SHA256
80dd215aabe5b7e902f2cb64cd77049011637ec3f65dc00782dab64a1c57c536
-
SHA512
0de987421357527325df017babb771f7364309c3814ed06757345939601cc5d3c4c312dd4dde796b56f7766615ef436742daed4336f33cc5f1b11011df1f0a6c
-
SSDEEP
768:4fbfyk6Yo2cOchNMhGnhtzDUkadBNbxDOKFJG1/SW5ziU3utXr/tmFJmJlCWoN6S:g9oGoWhGHzDNGZxDOKFJJWAU3utJmFJz
Behavioral task
behavioral1
Sample
cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb.exe
Resource
win7-20240704-en
Malware Config
Extracted
netwire
abi.asu.su:2525
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
abi
-
lock_executable
false
-
offline_keylogger
false
-
password
Somma2009
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb
-
Size
84KB
-
MD5
64c2af0bd91c8ac12cec3a3978cf191f
-
SHA1
6b988fd4f98e67e8be9359b5f3c9ea33fb470173
-
SHA256
cde1062d7bacd1795c61dae09435a2affc75e9f5f7f0eeae581f687130af46fb
-
SHA512
4725787862d05c0e9632caf7c8c6e6dfdfd75e8e2a11f5a7c9724ccfbe47689674a5e92e31e29f6f864a1d03f7fbe0dd2ac0a91183ba3866b0c6097510ecf220
-
SSDEEP
1536:Jr/zIEc9uQ1q1vD9qrPP+r4MrdN/F+Xs6ibNqiRGWkxuAdDWTF:Jr/zIEyQIrPP+r4MrdN/086ibgqGWk0x
-
NetWire RAT payload
-