Overview

overview

10

Static

static

10

55eb95f1ad...4a.exe

windows7_x64

10

55eb95f1ad...4a.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    55eb95f1ad05a1a1acff7b2b727e30d4045e9eab88cee2ab7cedb7db0c1b434a
  • Size 148KB
  • Sample200629-eaa35hpnge
  • SHA256 55eb95f1ad05a1a1acff7b2b727e30d4045e9eab88cee2ab7cedb7db0c1b434a
  • MD5 SHA1 SHA512
Score
10/10
netwirebotnetpersistenceratstealer

Malware Config

Targets

    • Target
      55eb95f1ad05a1a1acff7b2b727e30d4045e9eab88cee2ab7cedb7db0c1b434a
    • Size 148KB
    • SHA256 55eb95f1ad05a1a1acff7b2b727e30d4045e9eab88cee2ab7cedb7db0c1b434a
    • MD5 SHA1 SHA512
    Score
    10/10
    persistencebotnetstealernetwire

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks