Extracted

• • Target

    JaffaCakes118_b036f5137962c87037c064db3a4044f6

  • Size

    1.4MB

  • MD5

    b036f5137962c87037c064db3a4044f6

  • SHA1

    cfafab8056bb3890a7f100e4a1cf0efe180789e0

  • SHA256

    e110e000e33c09947373bf4f2c3d682b72061ac07376cdc4b2d709860cf9b977

  • SHA512

    555bfc02fdcf73898ceeb5d205ac6654a627b0e187cac2c99820bfb669fcb0e99f4a64595bd023dc0c78c1e804a3ffb13b842d07f1ac5faf692b0010903120ab

  • SSDEEP

    24576:5AHnh+eWsN3skA4RV1Hom2KXMmHa8ZRH63NV3JkDlY1v97m6g5d:Ah+ZkldoPK8YaCP1d

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2