Extracted

• • Target

    JaffaCakes118_a7c2071bb507c18431241852193bca70

  • Size

    172KB

  • MD5

    a7c2071bb507c18431241852193bca70

  • SHA1

    03a0231d6ac25bf6fdbd944b5b1fc93d892d867a

  • SHA256

    c29391d2d555b155e802f2f8f1648eddda69d87630e6e27ac8ce12fed5cdc893

  • SHA512

    65ffac57c58ce70712ac02037c34d1f0a11302edd379dbb6d3e120bc7f272c2b29e3f9aa33dcf92636dd7968dedd54234dc8401345043677444b2ae00b988781

  • SSDEEP

    3072:j6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZh:jd0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2