Extracted

• • Target

    JaffaCakes118_f04cc83399b31a729f2422c62f3855d2

  • Size

    172KB

  • MD5

    f04cc83399b31a729f2422c62f3855d2

  • SHA1

    fc54c566fcc87aa096fd58f1250f6123b91c8240

  • SHA256

    061506c9e5c7a713d67861b446f84639330eb6b1f1d33c9702441b8a69e84459

  • SHA512

    e3b1ea17b2fcdc012082f887ae42e8fbe2ac52c3c664499eccb90c6d2db691ff125da0200288447654abab7671a8d0b5789c7eb2907fbf818c720a1fc5e8df76

  • SSDEEP

    3072:X6RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZV:Xd0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2