Overview

overview

10

Static

static

10

8db4764960...2N.exe

windows7-x64

10

8db4764960...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8db47649608e60dfeecc9ba1df2035fe0b8f1655aed29e988b34974a0b1644f2N.exe

  • Size

    759KB

  • MD5

    dffca6366f878b69421f2b8144be62e0

  • SHA1

    a6e7c904441dd9b96b871259f8c2063eae5e6084

  • SHA256

    8db47649608e60dfeecc9ba1df2035fe0b8f1655aed29e988b34974a0b1644f2

  • SHA512

    e7cc3b003eb4bb6658c77dd156fe7ec784c5ae61eccbcf77e19b9623d4e3fc346d2e1c299cf398c5d0627d2b4d8e2f668f4850b2780e8120edf9c8194d03b95a

  • SSDEEP

    12288:wKkPGEmbQS0dhtOO/yzInFLkdphtGX6QeBZ7YxAPvBcbxaEIgRA0j7ZYGvYgAIw9:w3msSKhttyzWFKhIX6QKNUbxggKNLo1C

Score
10/10
upxratnetwire

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
    rat
  • Netwire family
    netwire
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8db47649608e60dfeecc9ba1df2035fe0b8f1655aed29e988b34974a0b1644f2N.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections