General

  • Target

    b702b5b310b69c25c6f8105fb69b01db3c710daf224bc75a99891c085aef4e49.exe

  • Size

    759KB

  • MD5

    59b49eba7d5c7eb49a6c6092d2cdcb6b

  • SHA1

    75a1ead922c4330a21084b22ea58623853f2265e

  • SHA256

    b702b5b310b69c25c6f8105fb69b01db3c710daf224bc75a99891c085aef4e49

  • SHA512

    ebe9a36b6c93557d420bdabf409a62962964292fbd187dc3b6b2d54c82e00e170f237da73a36f9c9d24afed533b5bb84cfb701a3536a5f9db9e98a5aaaaccc70

  • SSDEEP

    12288:wKkPGEmbQS0dhtOO/yzInFLkdphtGX6QeBZ7YxAPvBcbxaEIgRA0j7ZYGvYgAIw0:w3msSKhttyzWFKhIX6QKNUbxggKNLo1f

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b702b5b310b69c25c6f8105fb69b01db3c710daf224bc75a99891c085aef4e49.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections