Extracted

• • Target

    JaffaCakes118_b17689b3a40d87cc5a3e4368dbc00297

  • Size

    172KB

  • MD5

    b17689b3a40d87cc5a3e4368dbc00297

  • SHA1

    b2bc48e0ec6fa2fe1750f71ce8e89dafb1ee07dd

  • SHA256

    aa915e2a08e2cb04a7cb8fe3d808ba03a6a9931558614edc5705b63aa62b08c9

  • SHA512

    55d02652ab42122f8042ce99ea6c66ea6c220c9f4c04a4a1df2d9007964b2847f4aa80265a617183800d3fb9bcaa269cbcd24ad9213adbe455318974bb5eda74

  • SSDEEP

    3072:C6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZw:Cd0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2