Extracted

• • Target

    JaffaCakes118_86d324a4e468f892087b37778c139c3b

  • Size

    172KB

  • MD5

    86d324a4e468f892087b37778c139c3b

  • SHA1

    f28ea5b969bb9d7f13035088336330e0e71e63b7

  • SHA256

    b24a1299d024bdea77ab8087b0271173fc202b3ac473dfb8256da45683f480af

  • SHA512

    7550206ba63741ed377872d6123bfdfa96217ac856a9c3d5da1cbcd65d428d986a47fbc0374da2e3cfc1805fb03b9a9dd2b9115a6aab1ebcea34625e66d17074

  • SSDEEP

    3072:A6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZG:Ad0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2