76c07ebf7036fbee5f2916959c85c9616d679e031785a33eadba5c6db79f079a.bin

Classification: Malicious

76c07ebf7036fbee5f2916959c85c9616d679e031785a33eadba5c6db79f079a.bin is a malicious file sample. Linked to Netwire malware. Detected by 62 antivirus engines.

Detection summary

  • 62 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: NETWIRE (S0198)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-04-25 03:45:04 2026-04-25 06:45:07
Netwire Triage 2026-04-25 03:09:50 2026-04-25 03:09:50 malicious-activity S0198 NETWIRE

Tags

malicious trojan netwire warzonerat botnet discovery execution infostealer persistence rat stealer

Sample information

Filenames
76c07ebf7036fbee5f2916959c85c9616d679e031785a33eadba5c6db79f079a.bin, x76c07ebf7036fbee5f2916959c85c9616d679e031785a33eadba5c6db79f079a.exe
File type
PE32 executable for MS Windows 5.01 (GUI), Intel i ...
MD5
7823eb7d5eab462607525020fe16a2a8
SHA-1
a6251294f4dc2c28de388843e6b8ce66ba9f060b
SHA-256
76c07ebf7036fbee5f2916959c85c9616d679e031785a33eadba5c6db79f079a
First indexed
2026-04-25 03:09:50
Last updated
2026-09-03 01:04:55

Antivirus detections

EngineDetection
ALYacTrojan.Generic.39407064
APEXMalicious
AVGWin32:MalwareX-gen [Rat]
AlibabaTrojanSpy:Win32/NetWire.3bd96114
Antiy-AVLTrojan/Win32.NetWire
ArcabitTrojan.Generic.D2594DD8
AvastWin32:MalwareX-gen [Rat]
AviraTR/AVI.Agent.tfeey
BitDefenderTrojan.Generic.39407064
BkavW32.AIDetectMalware
CTXexe.trojan.netwire
ClamAVWin.Trojan.Ulise-7135679-1
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebBackDoor.Wirenet.543
ESET-NOD32Win32/Spy.Weecnaw.O trojan
ElasticWindows.Trojan.Netwire
EmsisoftTrojan.Generic.39407064 (B)
F-SecureTrojan.TR/AVI.Agent.tfeey
FortinetAutoIt/Injector.DUY!tr
GDataTrojan.Generic.39407064
GoogleDetected
GridinsoftTrojan.Heur!.03006021
IkarusTrojan-PSW.Delf
K7AntiVirusTrojan ( 005c86201 )
K7GWTrojan ( 005c86201 )
KasperskyTrojan.Win32.NetWire.bh
KingsoftWin32.Trojan.NetWire.bh
LionicTrojan.Win32.NetWire.4!c
MalwarebytesWeecnaw.Spyware.Stealer.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeDTrojan:Win/AveMaria.OX
MicroWorld-eScanTrojan.Generic.39407064
MicrosoftTrojan:Win32/NetWire.GMT!MTB
NANO-AntivirusTrojan.Win32.Dapato.fbcjkw
Paloaltogeneric.ml
PandaTrj/Genetic.gen
RisingBackdoor.NetWire!1.B84F (CLASSIC)
SangforVirus.Win32.Save.a
SkyhighBehavesLike.Win32.Generic.th
SophosTroj/Netwire-MS
SymantecML.Attribute.HighConfidence
TencentTrojan.Win32.Autoit_new.404661
Trapminemalicious.high.ml.score
TrellixENSArtemis!7823EB7D5EAB
TrendMicroTSPY_WEECNAW.SMC
TrendMicro-HouseCallTSPY_WEECNAW.SMC
VBA32BScope.TrojanSpy.Loyeetro
VIPRETrojan.Generic.39407064
VaristW32/Trojan.BIA.gen!Eldorado
ViRobotTrojan.Win.Z.Netwire.1462050.X
VirITBackdoor.Win32.Wirenet.CCS
WebrootW32.Backdoor.Gen
XcitiumTrojWare.Win32.TrojanSpy.Loyeetro.A@8lofxp
YandexTrojan.GenAsa!wuPhUbOs0XU
ZoneAlarmMal/AuItInj-A
ZonerTrojan.Win32.124944
alibabacloudTrojan:Win/Weecnaw
huorongTrojan/Injector.blh
tehtrisGeneric.Malware

Network contacts

34.41.139.193

DNS requests

Wealthy2019.com.strangled.net wealth.warzonedns.com wealthyme.ddns.net