General

  • Target

    91120e4dcb37baec8f6e38c35127a9e0d4d1d4a1c014f85dc96678a94dc86f8e

  • Size

    1.4MB

  • MD5

    29daf8b3cdc45ad45b4dac481c275fe7

  • SHA1

    a0fa483fefb15111262b2ea54b55224d78e48071

  • SHA256

    91120e4dcb37baec8f6e38c35127a9e0d4d1d4a1c014f85dc96678a94dc86f8e

  • SHA512

    0f77ac2876e478010b4b70e1c865716a5ffd74f3127d345cf0674469c9065d5d4d2191eaf1405d51ea269eba7abda9b6c72cb539f1ad5a62e335e5997e0695e7

  • SSDEEP

    24576:ru6J3xO0c+JY5UZ+XCHkGso6Fa720W4njUprvVcC1f2o5RRfgdWYL:Fo0c++OCokGs9Fa+rd1f26RNYL

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91120e4dcb37baec8f6e38c35127a9e0d4d1d4a1c014f85dc96678a94dc86f8e
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections