General

  • Target

    0143b2c1d085527ddac1ae4efdf6e6f058ae0f81a0418249feb3ebc98fd7b391N

  • Size

    1.3MB

  • MD5

    89587d58d364896acf5ba182589d97b0

  • SHA1

    42153cee2671306553fd4ea90ae21ee3abdad8aa

  • SHA256

    0143b2c1d085527ddac1ae4efdf6e6f058ae0f81a0418249feb3ebc98fd7b391

  • SHA512

    db5fdf5e928edeb6671115f67b7b035e5675e831df3ec3dfadaa92b825d05aa84eb3ecdde18d7e95018a097b0eecf07e5cdff47a3fa86faff84344b0624149a8

  • SSDEEP

    24576:au6J33O0c+JY5UZ+XC0kGsoEAdx20W4njUprvVcC1f2o5RRfgdWYR:su0c++OCvkGs7Adgrd1f26RNYR

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0143b2c1d085527ddac1ae4efdf6e6f058ae0f81a0418249feb3ebc98fd7b391N
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections