Extracted

• • Target

    JaffaCakes118_2c4e96e80a99ce69f523ede8b9dc34a5

  • Size

    172KB

  • MD5

    2c4e96e80a99ce69f523ede8b9dc34a5

  • SHA1

    19ec47102bd1ec37fd6e27fcaea3b09a2902c643

  • SHA256

    c9cc3d87e2e32cf39af2d58a78e79ef46f5a0de656eb7cf4b3707812e0fd2812

  • SHA512

    ad6916678456b75d08cd827430e58a99a630d976f6141b332fad865e84a659137c5fd63a5450ffee611c2afee79ca3ede68c34b576c33780f8446b2a36ebd6cf

  • SSDEEP

    3072:P6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZt:Pd0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2