Extracted

• • Target

    183b1eea8427abbc3d6f881d0b8fe7d0aeab2286cb20abfd4a279d940c1b661e.exe

  • Size

    172KB

  • MD5

    bf4a3499a959e8a046a199fa95438946

  • SHA1

    9760f2028212a94103535cb24fdb700afc71bfd2

  • SHA256

    183b1eea8427abbc3d6f881d0b8fe7d0aeab2286cb20abfd4a279d940c1b661e

  • SHA512

    3c2f18cbc31eb52a4fa57601ac6d5f29c6f4b049add55856e40501fa1cd45f28efdd1492679abf468e66f1368c016b0309461016fb507b499f5a40d21405356f

  • SSDEEP

    3072:C6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZwO:Cd0Ih532Kd3zjL7S1kEl7jyaFJmV

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2