Extracted

• • Target

    54b3a153f753fdc934796f0427a18fba_JaffaCakes118

  • Size

    240KB

  • MD5

    54b3a153f753fdc934796f0427a18fba

  • SHA1

    249bbd0fda56557898a6997ea3e30d19ac34fdaa

  • SHA256

    618042e17e94c7e843ba0ac1889d3a4b7e1c3157bd1d6806131060533df82ddd

  • SHA512

    4394f4fdb018951b4dfa987c777e9937630af93e7f2666347996b6f5de266e844a5836755e455afb50d09e8c4d6ac87dc430d4a5e033d6b6dee2c114aa4a1c61

  • SSDEEP

    6144:ib7jFYBiXBcygj8we79zMfrCcLkRFxh+JZakodZiDmmmmmmkX:sOBiXBLgjre7VMzCcLUFzqgkaIDmmmmT

  Score

  10^/10

  netwirebotnetratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2