Extracted

• • Target

    e9d3f52e1b742b6ca03896a7fa0bb5299578478d3f60fd9c799088637e4f0703.exe

  • Size

    172KB

  • MD5

    ef714f3b2febd2143424c3699004c30c

  • SHA1

    b0b8d8360a45f78e4f45fe77659d0b66bcc7d782

  • SHA256

    e9d3f52e1b742b6ca03896a7fa0bb5299578478d3f60fd9c799088637e4f0703

  • SHA512

    d24f2ad483e4a67690680c0c5d476856adbb3b353b1f4379088456c12d771c2b2afbad0006a4682baef525363867ef891f56b7cbeae9877691bd1d738ced95e0

  • SSDEEP

    3072:r6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZJe:rd0Ih532Kd3zjL7S1kEl7jyaFJmA

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2