Extracted

• • Target

    JaffaCakes118_94b4c40878a87a31867def16aa33fecb

  • Size

    172KB

  • MD5

    94b4c40878a87a31867def16aa33fecb

  • SHA1

    a758ca9e3694552a325c66ee18bf780efb728bf3

  • SHA256

    026a2f1fe8aa3490431c9865c5985f6df910ae9dbcc6bd14e178f7d693d910d3

  • SHA512

    e6a565a77f5dd3c3d8a1d14f46d1104fbbbb817419549db1f8ecfbeb48e746303f39890b23e00ecfd8b0aa9cf42bf0423ca1f71ad5fc98d44ba02d19f81396b4

  • SSDEEP

    3072:u6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZs:ud0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2