Extracted

• • Target

    JaffaCakes118_1c62bd6ba2e246f684a48068b0c02cd0

  • Size

    172KB

  • MD5

    1c62bd6ba2e246f684a48068b0c02cd0

  • SHA1

    10f2818f976d6bc9670c8312e96af6bb30cacc57

  • SHA256

    b4c6ae725929c95cf03afbe1aeebd92395c2a8f96946a686dafcac35d1d7d285

  • SHA512

    4a528f81979a5d7075478cd93d5302096e65b1d064a7d2d33c2e7a3f8e6cd61d31d96f6922bf6e48f5c28c4aa338452fc2a20ce92d440d6a1df43170f5799f96

  • SSDEEP

    3072:W6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZ0:Wd0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2