Extracted

• • Target

    JaffaCakes118_5a2e91bb6bc51aa3be355dc776ddf622

  • Size

    172KB

  • MD5

    5a2e91bb6bc51aa3be355dc776ddf622

  • SHA1

    ab51ec912030a2fa3512bbf6c367178f58a0395a

  • SHA256

    9cbfe465f8c758d24fafc2d054ef37474eb67d17e8e6916134541c53760433b7

  • SHA512

    819e59c1e8d4b55c1f56503dd7d3940aac9ccdfd91f76f7978581b5960c3dfd09d4b7de7d217bb20e6bf14080c31f8955522845d32d01219be3ea13c3dcf813e

  • SSDEEP

    3072:46RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZe:4d0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2