Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Detection
PeID
Microsoft Visual C++ v6.0 DLL
1 malicious · 1 file
EXE44ea40ab154db23a5472610e740f67a1NetWire RAT
Structure
| Config. Field | Value |
|---|---|
| Config. Key (RC4) | 48-75-huhuhuhuhuhuhuhuhuhuhu |
| Domains | solutihuhuhuhuhuhuhu |
| Password | Pahuhuhuhu |
| Host ID | shuhuhuhu |
| Mutex | LPhuhuhuhu |
| Install Path | %AppDahuhuhuhuhuhuhu |
| Startup Name | shuhuhuhu |
| ActiveX Key | -huhuhuhu |
| KeyLog Dir | %AppDhuhuhuhuhuhuhu |
| Copy executable | Thuhuhuhu |
| Delete original | Fhuhuhuhu |
| Lock executable | Thuhuhuhu |
| Registry autorun | Thuhuhuhu |
| ActiveX autorun | Fhuhuhuhu |
| Use a mutex | Thuhuhuhu |
| Offline keylogger | Thuhuhuhu |
| Proxy Option | Direchuhuhuhuhuhuhu |
| other Option | 0huhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential