General

  • Target

    3394f0c1a9374dc2825040cdcefdeaa26aa8279737ae7c5d17feee3cfe7d222e.exe

  • Size

    1.4MB

  • MD5

    b4eea74952c2751c3827c26482bea643

  • SHA1

    4e70151f88422873cf192fddc1f8f7d0392a9b7b

  • SHA256

    3394f0c1a9374dc2825040cdcefdeaa26aa8279737ae7c5d17feee3cfe7d222e

  • SHA512

    60d73142e6913872627d42192762a7c2091418014e4a9156ca7469326b75a8b0810e6d2f5bb90cd4ca7faeec832fff1e68d68d85b2b9365d338ef8b8639d9c89

  • SSDEEP

    24576:ru6J3xO0c+JY5UZ+XCHkGso6Fa720W4njUprvVcC1f2o5RRfgdWYa:Fo0c++OCokGs9Fa+rd1f26RNYa

Score
10/10

Malware Config

Signatures

  • NetWire RAT payload 1 IoCs
  • Netwire family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3394f0c1a9374dc2825040cdcefdeaa26aa8279737ae7c5d17feee3cfe7d222e.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections