netwire | 934f956a1d2dda18dd41936e1501ce338651986c370594eb67a1c74d759990eb | Triage

Sharing

General

Target

934f956a1d2dda18dd41936e1501ce338651986c370594eb67a1c74d759990eb
Size

123KB
Sample

240916-kmafxsydkm
MD5

adc4317ced6ff9de7e8b5fc1f60b380a
SHA1

d4787fce1be5f8543f2be935dfe1f861915bab0f
SHA256

934f956a1d2dda18dd41936e1501ce338651986c370594eb67a1c74d759990eb
SHA512

528ba0c3896924094310c13b90a638521cbfddb114d1c74506601c1a6794a538d4e599c8c512c22ab35eab24c453629fecc7ab53dd6592f906ebc5d125c0d020
SSDEEP

3072:6lWXBDp575Ptx4WR59bhpRi3nFsoomZjHbCRFcilcU8C3y2bfvXh:npzlxjXrR4s76T2RxlcUAGfvXh

Score

10^/10

netwire botnet discovery stealer

Malware Config

Targets

- Target
  
  934f956a1d2dda18dd41936e1501ce338651986c370594eb67a1c74d759990eb
- Size
  
  123KB
- MD5
  
  adc4317ced6ff9de7e8b5fc1f60b380a
- SHA1
  
  d4787fce1be5f8543f2be935dfe1f861915bab0f
- SHA256
  
  934f956a1d2dda18dd41936e1501ce338651986c370594eb67a1c74d759990eb
- SHA512
  
  528ba0c3896924094310c13b90a638521cbfddb114d1c74506601c1a6794a538d4e599c8c512c22ab35eab24c453629fecc7ab53dd6592f906ebc5d125c0d020
- SSDEEP
  
  3072:6lWXBDp575Ptx4WR59bhpRi3nFsoomZjHbCRFcilcU8C3y2bfvXh:npzlxjXrR4s76T2RxlcUAGfvXh
Score

10^/10

netwire botnet discovery stealer
- Netwire
  Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
  botnet stealer netwire
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

netwirebotnetdiscoverystealer

behavioral2

netwirebotnetdiscoverystealer