Extracted

• • Target

    JaffaCakes118_d89fb31b37792189fd7023ee40c957c6

  • Size

    172KB

  • MD5

    d89fb31b37792189fd7023ee40c957c6

  • SHA1

    59c6e9d3065ff86a390449a5fd8d1937752cf908

  • SHA256

    ebba3d3328be36662b9760c8404c9e7fa768bc2c16f92e6d10d84ddf299b9db4

  • SHA512

    1f221b5396aca32e50a5750a47e35cf9369f07ec7e102e32226591d619a537f7f17213619a63a519bedc4aae979db1c3716988db30ceb8ea6c876cf9b4315808

  • SSDEEP

    3072:56RrEikYA0QdTh532O8QXJlx3er+jL7ScA96TElZIajM/naFhNlUw4WOXZf:5d0Ih532Kd3zjL7S1kEl7jyaFJm

  Score

  10^/10

  netwirebotnetdiscoveryratstealer

  • NetWire RAT payload

    rat

  • Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire

  • Netwire family

    netwire

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2