Overview

overview

10

Static

static

01_extracted.exe

windows7_x64

10

01_extracted.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01_extracted.exe

  • Size

    1.2MB

  • Sample

    200624-s1ngyppdax

  • MD5

    b5e5f010307dc8786b20e0ee1bbc969e

  • SHA1

    e0d2116b60b1244b66ce308b6298f276abdc11cf

  • SHA256

    cdb81c63c05c1850a79a3441001e9f007fea5851a06090da724c8fe924204e93

  • SHA512

    848f177f0e4462d8cfe2e4f9775573edd7562b7c674fe9727208322b714154d5d12850c775d97a0ccb1326434c96689cd3223c57633deefa3de0154cebea8044

Score
10/10
netwirebotnetratstealer

Malware Config

Targets

    • Target

      01_extracted.exe

    • Size

      1.2MB

    • MD5

      b5e5f010307dc8786b20e0ee1bbc969e

    • SHA1

      e0d2116b60b1244b66ce308b6298f276abdc11cf

    • SHA256

      cdb81c63c05c1850a79a3441001e9f007fea5851a06090da724c8fe924204e93

    • SHA512

      848f177f0e4462d8cfe2e4f9775573edd7562b7c674fe9727208322b714154d5d12850c775d97a0ccb1326434c96689cd3223c57633deefa3de0154cebea8044

    Score
    10/10
    ratbotnetstealernetwire

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks